46 identity connectors · 43-app revocation · PDF/CSV exports
Run periodic user access reviews across 46 native API and SCIM connectors, enrich posture with Okta 90-day sign-in inactivity, and import unconnected tools via CSV or AI-assisted screenshots. Flag former-employee seats, delegate reviews to App Owners or Line Managers via Sam, revoke access across 43 supported connectors, and export timestamped PDF and CSV audit packs.
Trusted by 190+ organizations
End-to-end access governance
Exporting user lists app by app into Excel burns weeks of IT time and still misses orphaned accounts after offboarding. Elba automates collection, delegation, revocation, and audit packaging.
Pull live user accounts across 46 API and SCIM connectors (including Google Workspace, Microsoft 365, Salesforce, HubSpot, Jira, GitLab, Linear, 1Password SCIM, and Figma SCIM), sync Okta assignments and 90-day sign-in inactivity, and bring any remaining app into the same campaign via CSV or AI-assisted screenshots.
Cross-reference SaaS seats against your core directory to spot departed employees, external contractors, unmatched personal emails, and applications bypassing Okta SSO before your auditor does.
Assign Maintain or Revoke decisions to App Owners or Line Managers via Sam in Slack, Microsoft Teams, Google Chat, or email, trigger direct user removal across 43 remediation-enabled connectors, and download timestamped PDF summaries and CSV decision logs.
Access governance comparison
See how Elba delivers audit-grade access reviews alongside SaaS DLP and Shadow AI protection.
| Access review requirement | Manual Excel / CSV spreadsheets | Standalone IGA / SaaS spend tool ($27k+/yr) | Elba User Access Reviews |
|---|---|---|---|
| User & seat collection | Manual CSV exports and copy-paste across dozens of admin portals | Covers connected apps but charges heavy standalone per-user fees | 46 native API/SCIM connectors + Okta 90-day inactivity + CSV & AI screenshot import |
| Catching former-employee accounts | Easy to miss in VLOOKUP formulas across inconsistent email aliases | Flags orphans, but blind to public Drive/SharePoint links left behind | Identity Gaps view catches former-employee seats + pairs with Cloud DLP & OAuth cleanup |
| Reviewer experience (managers & owners) | Managers ignore 500-row spreadsheets and stall audit deadlines | Requires managers to log into yet another unfamiliar web portal | Delegated Maintain/Revoke prompts via Sam in Slack, Teams, Google Chat, or email |
| Executing approved revocations | IT manually logs back into every SaaS admin console to delete users | Often opens IT tickets unless enterprise provisioning tiers are bought | Automated user removal/suspension across 43 connectors + tracked manual tasks for imports |
| ISO 27001, SOC 2 & NIS2 deliverables | Scattered email threads and unversioned spreadsheets | Exports access logs only; omits DLP, Shadow AI, and awareness controls | 1-click timestamped PDF Summary + Detailed CSV pack inside your unified security platform |
Campaign workflow
Run recurring quarterly or semi-annual campaigns without spreadsheet chaos.
Connect your core workspace and SaaS stack via API or SCIM, sync Okta directory and 90-day inactivity signals, and upload CSVs or screenshots for custom tools.
Immediately spot former-employee seats and unmatched accounts, then route scoped Maintain/Revoke lists to App Owners or Line Managers via Sam.
Trigger automated seat removal across 43 supported integrations, close remaining manual offboarding items, and export dated PDF and CSV packages.
Connected workflows & documentation
A closer look
Within Elba’s 226 displayed sources (222 native API and SCIM integrations plus 4 managed browsers), 46 connectors carry verified user-inventory support for access reviews: 43 support both user inventory and automated remediation (direct removal or suspension), while 3 (Azure DevOps, Gusto, and Zapier) provide user inventory with tracked manual removal. Okta also syncs directory users, groups, app assignments, and 90-day sign-in inactivity.
You can import user lists via CSV or upload admin-screen captures using Elba’s AI-assisted screenshot import so every in-scope application is reviewed, delegated, and exported in the same campaign.
Admins can review directly or delegate campaigns to each application’s App Owner or each employee’s Line Manager, with reminders delivered via Sam across Slack, Microsoft Teams, Google Chat, or email.
Every completed campaign exports a timestamped PDF Summary report alongside a Detailed CSV log recording each reviewed user, reviewer, Maintain or Revoke decision, and completion timestamp.
Related solutions
Audit OAuth scopes across Google Workspace, Microsoft 365, and Dropbox, score vendor reputation 0-10, and run CVE & vendor breach Playbooks.
Enforce and export technical controls for NIS2 Art. 21, ISO 27001:2022, SOC 2 CC6, GDPR, and EU AI Act Art. 4 with OVHcloud EU residency.
Scan 7 cloud DLP sources, run 100-file surgical Google Drive recipient removal, and route 1-click owner fixes via Sam across 4 channels.
Request a 30-minute walkthrough of Elba’s 46-connector User Access Reviews, or run a free workspace exposure check.