Suspend user in 1Password
Automatically suspend a departing 1Password member from a Slack request with Stepwork, blocking vault access immediately.
- Use case
- Employee offboardingIT
- Best for
- IT Administrator
- Applications used
1Password
Slack
- Business outcome
- Risk reduction
The problem
They left. They can still open the vaults.
Shared company credentials live in 1Password. If suspension lags the rest of offboarding, a former employee can still unlock vaults IT thinks are closed.
Someone has to open the admin console and find the member by hand. That step is easy to push to tomorrow while passwords stay reachable.
The outcome
Departed employees lose vault access immediately
Stepwork suspends the member in the 1Password admin console. Vault access ends with the request as one step of employee offboarding, and the run records who asked and when.
- The member is suspended.
- Vault access is blocked for that account.
- If the member cannot be found, the run stops.
The process
From Slack request to a suspended 1Password member
A teammate posts the request in Slack. Stepwork suspends the member in 1Password admin, in the same order every time.
- Step 1
Request it in Slack
A teammate posts the departing employee’s work email in the offboarding channel. That message starts the flow, and Stepwork records who asked and when.
- Step 2
Find the member
Stepwork signs in to the 1Password admin console and locates the member. If nobody matches, or more than one does, the run stops.
- Step 3
Suspend the account
Stepwork suspends the member, the same change an admin makes by hand. Vault access ends for that account.
- Step 4
Confirm and reply in Slack
Stepwork checks that the member shows as suspended, then posts the result back in Slack with a timestamp.
Why Stepwork
1Password is on the offboarding path
A deterministic agent runs the suspension you recorded. Shared credentials do not stay open waiting on whoever remembers the password manager.
Similar use cases
Similar use cases
- Invite user with team vault access in 1PasswordInvites a new member and grants access to the standard vaults for their team.
- Grant vault access in 1PasswordAdds a member to a specified shared vault and confirms the permission level.
Deactivate user account in OktaSigns into the Okta admin console, locates the user by email, deactivates the account, and confirms the status change ended all SSO sessions.
FAQ