Identity Live in production

Dormant Account Review

Find Okta accounts inactive beyond a configurable threshold and propose suspending them in one approval-gated review, fully audited.

Integrates with

Okta

The problem

Inactive accounts are a quiet liability. Departed contractors, abandoned test users, and forgotten service logins keep their access until someone goes looking, which usually only happens during an audit.

What AscendCore does

On demand from Slack or Teams, AscendCore scans the active accounts in Okta and posts a single review card listing the longest-inactive ones, those whose last sign-in is past your threshold, capped per review. One approval suspends the reviewed set. Every account is re-verified at execution: an account that signed in after the card was posted is refused rather than suspended, and suspension is reversible from the Okta console. Accounts with no recorded sign-in are counted on the card but never proposed, because missing sign-in data is not evidence of dormancy. The decision and per-account outcomes land in the audit chain.

Status

Live in production. Runs against a real Okta tenant today from Slack and Teams; it scans active accounts, posts the longest-inactive set past your threshold on one review card, and on approval suspends the reviewed accounts, re-verifying each at execution so an account that signed in after the card was posted is refused rather than suspended (and suspension stays reversible from the Okta console). The decision and per-account outcomes land in the audit chain. The inactivity threshold is configurable per review (30 to 365 days, default 90).

Runbook source preview

Versioned, deterministic, auditable

Every runbook is defined as a versioned YAML manifest with explicit triggers, steps, and approval policies. The runbook itself is the audit-ready record of what AscendCore can and will do. Chat is just the interface that triggers it.

name: dormant-account-review
trigger:
  channels: [slack, teams]
  commands: [dormant-review]
steps:
  - scan_active_accounts       # lastLogin beyond threshold, capped
  - build_review_card
  - admin_approval             # destructive styling
  - reverify_each_account      # drift gate at execute, signed-in-since refuses
  - suspend_accounts           # per-account, reversible
approval:
  required: true
  approvers: [it-admins, sec-team]

Ready to deploy

Run dormant account review from Teams or Slack today

AscendCore deploys in days, not months for Slack + Okta or Teams + Entra stacks. See your first automated resolution the same day.

See plans & pricing Browse all runbooks

More identity runbooks

Live

Access Role Change

Multi-system orchestrated role transitions for promotions, transfers, and contractor-to-FTE conversions. Five seed roles ship out of the box (support tiers, sales SDR/AE, engineering contractor/FTE/intern, HR generalist/manager); each transition produces a single approval card showing the full access diff and executes sequentially across Okta + Entra + Jira + M365 with per-step audit outcomes.

Live

Account Unlock

Automate Microsoft Entra ID and Okta account unlocks from Slack and Teams. Identity verification, approval-gated unlock, failed-login counter reset.

Live

Compromised Account Response

Contain a suspected account compromise in one approval: revoke every active session, invalidate the password, and force MFA re-enrollment, fully audited.