IT OPS
Reclaim idle SaaS seats from SSO last-login gaps
Weekly cross-checks each SSO directory's last-login timestamps against active seat assignments in a tracking sheet.
How it runs
The automated pipeline, trigger to output.
- TriggerWeekly audit schedule fires
- ActionFetch SSO last-login data via admin APIHTTP webhook
- ActionLoad active seat roster sheetGoogle Drive
- LogicJoin on email, keep seats idle past threshold
- OutputPost idle-seat list to Slack for approvalSlack
What it does
This workflow finds SaaS licenses that nobody is using. It pulls each user's last successful SSO login from your identity provider, compares it to the seat-assignment roster you keep in Google Drive, and surfaces every paid seat that has been dormant longer than your inactivity window (default 45 days) so IT can revoke it.
When to use it
Run it when seat counts keep climbing but usage doesn't, or when finance asks why the SaaS spend grew. It's built for the recurring monthly license audit rather than one-off cleanups.
How it works
- 1A weekly schedule kicks off the audit.
- 2An HTTP call to your SSO admin API returns last-login timestamps for every user and the apps they authenticate into.
- 3The roster sheet of active seat assignments is loaded from Google Drive.
- 4A logic step joins the two on user email and keeps only seats whose last login is older than the threshold (or never recorded).
- 5The idle-seat list is posted to a Slack channel with per-seat owner, app, days idle, and monthly cost, ready for an approver to action.
Set it up
What you configure once, before turning it on.
- 1Connect HTTP webhookTrigger any URL on agent actions.
- 2Connect Google DriveDocs, sheets, slides, files.
- 3Connect SlackChannels, DMs, threads, mentions.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Indoor Air Quality Breach to Tenant Notice and Work Order
Listens for CO2, VOC, or humidity sensor alerts via webhook, and when a zone exceeds occupant-safety limits it emails affected tenants, opens a Monday remediation task.
Self-Service Reclaim Email for Idle Users
Detects users idle in a SaaS app past the threshold and emails each one a keep-or-release link; unanswered seats after the deadline are auto-flagged for removal.
Outlook Room Conflict Resolver with Approval Gate in Teams
When an Outlook room clashes, proposes a rebooking and asks the bumped meeting's organizer to approve the move in Microsoft Teams before any change is made.
Outlook Room Double-Booking Resolver with Auto-Rebook
Detects when two meetings claim the same Outlook room resource and automatically relocates the lower-priority meeting to a comparable free room.
Monthly Wasted-License Cost Report
Aggregates inactive-seat data across all tracked SaaS apps each month, computes total reclaimable spend, and delivers a ranked cost report to leadership in Notion and Slack.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.