Deprovision stale and former-employee accounts.
Remove or suspend eligible user seats across SCIM and API connectors such as 1Password, Figma, GitLab, Jira, Linear, Salesforce, HubSpot, OpenAI, and Anthropic.
Capability hub · Automated remediation
Direct security remediation across 47 connected sources.
Move from passive posture alerts to verified fixes in the source application: suspend or remove stale user accounts, strip risky file-sharing permissions, and revoke unneeded OAuth grants.
47 catalog API and SCIM sources support direct remediation actions, spanning account deprovisioning (43 user sources), file and message sharing fixes, and OAuth token revocation.
Capabilities
What this capability covers.
Strip risky file and channel exposures.
Remove eligible permissions in Google Drive (including surgical selected-recipient removal up to 100 files), SharePoint, OneDrive, Dropbox, Confluence, and public Slack channels.
Keep humans in control with Playbooks.
Trigger fixes manually after review, let employees resolve exposures in Slack or Teams, or automate approved workflows with Playbooks.
Detailed provider guides
Guides for remediation-enabled integrations.
Inspect the exact write scopes, eligible objects, and verification checks documented for each connector.
Google Workspace integrationGoogle Workspace
Directory sync, third-party app grants, and Drive sharing permissions.
Microsoft 365 integrationMicrosoft 365
Directory sync, with separate connections for file sharing and Teams.
SharePoint integrationSharePoint
Audit SharePoint Online site sharing, external guests, and Copilot exposure.
OneDrive integrationOneDrive
Detect exposed OneDrive for Business links, verify owners, and revoke access.
Confluence integrationConfluence
Uncover public Confluence spaces, sensitive runbooks, and external wiki access.
Slack integrationSlack
Employee messages and reminders, with separate public-channel protection.
Dropbox integrationDropbox
Review team access, connected apps, and shared links without downloading files.
1Password (SCIM) integration1Password
Inventory 1Password SCIM seats, run User Access Reviews, and automate offboarding.
Figma (SCIM) integrationFigma
Reconcile Figma SCIM seats, spot lingering contractors, and automate deprovisioning.
GitLab integrationGitLab
Audit GitLab group memberships, run engineering Access Reviews, and remove stale users.
Jira integrationJira
Inventory Jira Cloud users, detect orphan seats, and automate Access Review offboarding.
Linear integrationLinear
Audit Linear workspace members, flag departed users, and suspend revoked seats via API.
Salesforce integrationSalesforce
Audit Salesforce CRM licenses, catch departed reps, and deactivate revoked accounts.
HubSpot integrationHubSpot
Inventory HubSpot portal users, flag external agency seats, and automate removal.
Verified catalog coverage
All 47 remediation-enabled catalog sources.
Every integration below exposes at least one supported source-remediation action when authorized with the required permissions.
- 15FiveNative API connection
- 1Password (SCIM)Native SCIM connection
- AircallNative API connection
- AnthropicNative API connection
- AsanaNative API connection
- AWS IAMNative API connection
- BillNative API connection
- BoxNative API connection
- CalendlyNative API connection
- ClickUpNative API connection
- ConfluenceNative API connection
- DatadogNative API connection
- DialpadNative API connection
- DocusignNative API connection
- DropboxNative API connection
- Figma (SCIM)Native SCIM connection
- FivetranNative API connection
- FreshdeskNative API connection
- GitLabNative API connection
- Google WorkspaceNative API connection
- HarvestNative API connection
- HubSpotNative API connection
- InstantlyNative API connection
- JiraNative API connection
- LinearNative API connection
- Loom (SCIM)Native SCIM connection
- MakeNative API connection
- MetabaseNative API connection
- Microsoft 365Native API connection
- OneDriveNative API connection
- OpenAINative API connection
- OutreachNative API connection
- PagerDutyNative API connection
- PipedriveNative API connection
- RampNative API connection
- SalesforceNative API connection
- SendgridNative API connection
- SentryNative API connection
- SharePointNative API connection
- SlackNative API connection
- TableauNative API connection
- TailscaleNative API connection
- TeamtailorNative API connection
- TerraformNative API connection
- TypeformNative API connection
- ZendeskNative API connection
- ZoomNative API connection
Platform module
Explore this part of the platform.
Discuss your stack
Turn security findings into verified source changes.
Review which remediation actions apply to your stack and how Elba keeps administrators and owners in control.