IT OPS

Reclaim Licenses from 60-Day Inactive SSO Users

Scans Snowflake SSO login data on a schedule to find users who haven't authenticated to a paid SaaS app in 60+ days.

CategoryIT Ops
Enginesim
Difficultyintermediate
Triggerschedule
Steps5
Setup~15 min

How it runs

The automated pipeline, trigger to output.

  • TriggerMonthly schedule (1st of month)
  • ActionQuery SSO last-login per user from SnowflakeSnowflakeSnowflake
  • LogicKeep paid seats idle 60+ days
  • ActionOpen reclamation task per seat with costAsanaAsana
  • OutputPost savings summary to IT-ops Teams channelMicrosoft Teams

What it does

Finds paid SaaS seats that nobody is actually using. It reads SSO authentication events from your Snowflake warehouse, identifies accounts with no login to a target app for 60 or more days, and queues each one for license reclamation with a cost estimate.

When to use it

Run this monthly against expensive per-seat tools (BI, design, CRM) where SSO logs are the source of truth for usage. Best when your IdP already pipes login events into Snowflake.

How it works

  1. 1A scheduled trigger fires on the first of each month.
  2. 2Snowflake query returns last-login timestamp per user per app.
  3. 3A logic filter keeps only seats idle 60+ days on paid tiers.
  4. 4For each, an action creates a reclamation task in Asana with the seat cost and owner.
  5. 5A final output posts a consolidated table to the IT-ops Teams channel with total monthly savings.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect SnowflakeWarehouses, queries, shares.
  2. 2
    Connect AsanaTasks, projects, milestones — everywhere.
  3. 3
    Connect Microsoft TeamsChannels, chats, files.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.