IT OPS

Weekly Idle-Seat Audit from Okta Last-Login Logs

Pulls last-login data from your identity provider via webhook export, compares it against a license roster in Airtable.

CategoryIT Ops
Enginesim
Difficultybeginner
Triggerwebhook
Steps4
Setup~5 min

How it runs

The automated pipeline, trigger to output.

  • TriggerWebhook receives weekly IdP login exportHTTP webhook
  • ActionMatch users to Airtable license rosterAirtableAirtable
  • LogicRank by days-idle and reclaimable cost
  • OutputEmail per-department idle-seat digestGmailGmail

What it does

It builds a weekly idle-seat report by joining identity-provider login history against your authoritative license roster. Each department lead gets a tidy email of who has not logged in, how long it has been, and the recurring cost tied up in those seats.

When to use it

Use this when you want recurring visibility rather than a one-off cleanup, and your SSO covers most apps. It is the lightweight cousin of a full deprovisioning pipeline: it informs, it does not yet revoke.

How it works

  1. 1An inbound webhook delivers the weekly last-login export from your IdP.
  2. 2The flow looks up each user against the Airtable license roster to attach tool, team, and monthly cost.
  3. 3A logic step ranks seats by days-idle and multiplies by cost to compute reclaimable spend.
  4. 4Seats under the idle threshold are filtered out.
  5. 5A per-department digest email goes out via Gmail with the ranked idle list and a total potential saving.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect HTTP webhookTrigger any URL on agent actions.
  2. 2
    Connect AirtableBases, tables, views, automations.
  3. 3
    Connect GmailRead, draft, send, label.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.