Suspend a user in JumpCloud
Automatically suspend a departing user in JumpCloud from a Slack request with Stepwork. One suspension ends their SSO, LDAP, and device access together.
- Use case
- Employee offboardingIT
- Best for
- IT Administrator
- Applications used
JumpCloud
Slack
- Business outcome
- Risk reduction
The problem
Gone on Friday. Still signing in on Monday.
JumpCloud holds both identity and device access, so one leaver touches several layers. IT suspends the account by hand from the console, usually after the HR notice works its way to the queue.
Until then, the person can still sign in to apps through SSO and log in to the laptop JumpCloud manages. When an auditor asks when access ended, the only answer is a closed ticket.
The outcome
Apps and devices stop accepting them at once
Stepwork suspends the user in the JumpCloud console. SSO, LDAP, and device sign-in end together, and the run records who asked and when the account was suspended as part of employee offboarding.
- The account state reads Suspended before the run succeeds.
- An email that matches nobody stops the run.
- The Slack reply includes the time access ended.
The process
From Slack request to a suspended account
A teammate posts the request in Slack. Stepwork suspends the user in the JumpCloud console, in the same order every time.
- Step 1
Request it in Slack
A teammate posts the departing employee’s work email in the offboarding channel. That message starts the flow, and Stepwork records who asked and when.
- Step 2
Find the user
Stepwork signs in to the JumpCloud console and opens the user with that exact email. If there is no match, the run stops instead of guessing.
- Step 3
Suspend the account
Stepwork suspends the user, the same change an admin makes by hand. SSO apps, LDAP, and JumpCloud-managed devices stop accepting their sign-in.
- Step 4
Confirm and reply in Slack
Stepwork checks that the account state reads Suspended, then posts the result back in Slack with a timestamp.
Why Stepwork
One suspension, the same way every time
Stepwork runs the suspend path you recorded in JumpCloud. Credentials stay in 1Password; Stepwork holds a vault reference, never the password.
Similar use cases
Similar use cases
Lock and wipe a device on offboard in JamfSends a remote lock and wipe command to a departing employee's Mac and confirms command status.
Deactivate user account in OktaSigns into the Okta admin console, locates the user by email, deactivates the account, and confirms the status change ended all SSO sessions.
Disable user account in Microsoft Entra IDSigns into the Entra admin center, locates the user, and blocks sign-in, disabling the account across Microsoft services.
FAQ