n8n Probo Offboarding Webhook: Access Reviews + Slack

Automatically trigger Probo offboarding access reviews and notify admins in Slack

When a user is offboarded in Probo, this n8n workflow instantly creates a Probo access review campaign, checks which connected sources still show the user as active, emails the right tool admins, and posts a clear recap (plus connectivity alerts) to Slack.

What this workflow does

• Receives Probo webhooks: Listens for Probo user events (via a POST webhook) and normalizes the payload to detect when a user transitions from ACTIVE to INACTIVE, or is deleted while still ACTIVE.
• Stops on irrelevant events: If the event isn’t an offboarding signal, it exits early.
• Creates an access review campaign: For the user’s organization, it creates and starts a Probo access review campaign, fetches all access review sources, and alerts Slack if any sources are not CONNECTED.
• Waits for fresh access data: After starting the campaign, it waits two minutes for Probo to fetch the latest access data.
• Finds active tool access: Reads Probo campaign entries to identify which connected tools still show the offboarded user as active.
• Emails tool admins: Sends each relevant tool admin an email listing the tools to revoke access for; if no admin is found, it emails a fallback admin.
• Posts results to Slack: Publishes a recap with a link to the Probo campaign and highlights outcomes.

Use cases

• Automate least-privilege offboarding for SaaS teams using Probo access reviews.
• Ensure tool admins quickly revoke permissions by getting an email scoped to the exact systems where the user is still active.
• Detect Probo source connectivity issues early by posting alerts to Slack.

Technical details

• Integrations: Probo webhooks, Slack, and SMTP (email via an email-sendin setup).
• n8n node types: if, set, code, no op, wait, slack.
• Setup highlights: Create a Probo API credential, ensure you have the Probo organization ID in the webhook payload, configure a Probo user webhook (e.g., user:updated, user:deleted), and add an SMTP credential for sending emails.