Offboarding Checklist (Employee + Vendor)

System Active

Verify you have necessary permissions.

Schedule time for this activity.

System Active

**SSO Revocation**: Suspend user in primary IdP (Okta/Azure AD/Google) to cut access to all integrated apps.

**Session Revocation**: Trigger "Revoke All Sessions" / "Sign Out All Devices" to kill active tokens.

**Email Forwarding**: Verify no auto-forwarding rules were created by the user prior to departure.

**Mobile Device**: Send "Remote Wipe" (Corporate Data Only) command via MDM.

**Laptop**: Retrieve physical hardware or trigger BitLocker/FileVault lock if unreturned.

**Physical Access**: Deactivate building badge/keycard immediately.

**File Access**: Grant manager access to OneDrive/Google Drive for 30 days (if policy allows).

**Email Delegation**: Set Out-of-Office message directing to manager; do NOT keep account active indefinitely.

System Active

Confirm all items are marked.

Sign off on the log.

01 // EXECUTION_SEQUENCE