Overview

This guide describes how to remove a user from all Google groups when a user is deactivated.

Applies To

• Okta Workflows

Solution

List user groups flow

This flow gets all the user's Google groups and passes them to a helper for removal. 
 

List user groups flow

How the Flow Works

1. The flow runs when a user is suspended in Okta (Okta – User Suspended event card).
2. The Google – Read All User Groups card lists the groups to which this user belongs.
   • The Alternate ID is passed to the User Key field. This field usually holds the user’s Google email address.
3. The List – For Each card calls a helper flow to remove a user from each Google group.

Remove user from group helper flow

This flow removes the user from each Google group. 

Helper flow to remove a user from a Google group

How the Flow Works

1. The Helper Flow card has two inputs:
   • The Group ID from each group (as the flow iterates over the group list).
   • The User Email is the user’s Google email address
2. The Google – Remove User from Group card removes a user from a group.

Related References

• How to Remove a User From Groups When the User Is Deactivated
• How to Setup a Workflows Helper Flow (With For-Each and Streaming Cards)