Start the offboarding
HR or IT starts it by hand, or it opens automatically on a contractor's contract end date or, on Team, from an HR system termination.
Use Case
Employee access revocation in one action
When someone leaves, their accounts live in more places than your identity provider: GitHub organizations, AWS, Salesforce. When HR, IT or an admin runs the revocation, PurpletGo revokes the selected systems in one action, tells you which ones succeeded and which failed, and keeps a timestamped record of all of it.
30-day free trial - no credit card required
Coverage
Revoke access across identity, SaaS, and cloud
Apps and cloud - every plan
GitHubAWSSlack
Slack revocation deactivates the member through Slack SCIM, so it needs a Slack Business+ or Enterprise plan. Slack alerts and approvals are a separate connector that works on any Slack plan.
Identity providers - every plan
OktaGoogle WorkspaceMicrosoft Entra ID / Azure AD
In beta - every plan
SalesforceHubSpotZendeskJira CloudGitLabFigmaAsanaLinear
In beta - Enterprise
JumpCloudOneLoginPing Identity
How it works
How access revocation works in PurpletGo
Revoke in one action
Select the systems and revoke them together. Connected identity providers suggest which apps the person can reach.
Confirm every result
Each system reports revoked, failed, or needs manual action with the reason, and every attempt is written to the audit log with the time and the admin who ran it. The case cannot move on while a system has failed.
Retry only what failed
Systems that already revoked are skipped on a retry. In the offboarding workflow, the case moves past IT revocation once every selected system is revoked.
Know that access is actually gone
Access revocation and an audit log from day one.
30-day free trial - no credit card required