BAEZ TECH SOLUTIONS

Overview

I developed an automated offboarding process that ensures former employees’ physical security access is revoked promptly and reliably. Leveraging OneLogin, Zapier, and BetterCloud, the workflow deactivates Verkada door access and logs activity, reducing risk from delayed manual updates and enhancing audit compliance.

Workflow Details

• Trigger: The offboarding process begins when a user is suspended in OneLogin.

• Automation Flow:

1. OneLogin suspension triggers the Verkada Offboarding 1 of 2 workflow in BetterCloud.
2. BetterCloud sends the employee’s details to Zapier.
3. Zapier:
   • Logs the event in a Google Sheet (audit trail).
   • Searches an internal database for the employee’s Verkada UserID or ExternalID, depending on how their original access was provisioned.
4. Zapier sends an API call back to BetterCloud with the full user context (employee info + Verkada ID).
5. BetterCloud initiates the Verkada Offboarding 2 of 2 workflow.
6. This second phase sends an API call to Verkada to suspend the employee’s door access.
7. The system waits 14 days as a grace period or for audit retention.
8. After the wait, BetterCloud sends a final API call to delete the user from Verkada.

Impact

This automation closes a critical physical security gap by ensuring door access is revoked in real-time upon employee departure. It eliminates reliance on manual updates, logs all actions for security audits, and ensures complete deactivation within a 14-day compliance window. As a result, it significantly reduces the risk of unauthorized building access and strengthens the company’s overall offboarding posture.