n8n Workflow: Employee Offboarding Access Revocation Webhook

Instant employee offboarding access revocation—automated via an n8n webhook

This n8n workflow receives an employee offboarding request through a POST webhook, revokes access across IAM and SaaS systems via HTTP APIs, verifies removals, finalizes IT/HR actions, and returns a compliance report with per-step statuses.

What this workflow does

• Receives offboarding payload: Accepts JSON via webhook (including employeeId, email, and lastDay), generates a request ID, and prepares request data and target URLs.
• Validates required fields: Ensures the payload includes the required offboarding details before proceeding.
• Revokes identity in IAM: Calls an IAM revoke API over HTTP to disable/delete the identity.
• Verifies IAM revocation: Calls an IAM verify API to confirm the account is revoked.
• Revokes SaaS access: Calls a SaaS revoke API over HTTP using an apps list (e.g., Slack, Google Workspace, GitHub).
• Verifies SaaS removal: Calls a SaaS verify API to confirm access is removed.
• Finalizes IT/HR actions: Calls an IT/HR finalize API (e.g., disabling email and updating HR status).
• Returns compliance outcome: Aggregates results into fully_revoked, partial, or failed, and responds to the webhook caller with an appropriate HTTP status code.

Use cases

• Automate access removal when HR submits an employee termination request.
• Reduce manual offboarding steps by orchestrating IAM + SaaS revocations and verification.
• Generate audit-friendly offboarding compliance reports for IT/HR stakeholders.

Technical details

• n8n nodes: webhook, code, http request, wait, respond to webhook, sticky note.
• Integrations via HTTP: IAM revoke/verify, SaaS revoke/verify (example apps include Slack, Google Workspace, GitHub), and IT/HR finalize.
• Setup required: Replace placeholder httpbin.org endpoints with your real IAM, SaaS, and IT/HR API URLs; add required authentication headers/credentials if your endpoints require them.