In this guide:

1. Okta Workflows guides
2. List user groups flow
3. Remove user from group helper flow
4. Related Workflows guides
5. Workflows resources

Okta Workflows guides

Okta Workflows guides are questions and answers from the community office hours, the #okta-workflows channel on MacAdmins Slack, and other places. Read all the other guides.

How to remove a user from all Google groups when the user is deactivated?

This guide will teach you how to remove a user from all Google groups when a user is deactivated.

Thanks to Bryan Barrows, Workflows Product Specialist at Okta, for providing this flow.

List user groups flow

This is the main flow:

In this flow:

1. The flow is run when a user is suspended in Okta (Okta – User Suspended event card).
2. The Google – Read All User Groups card lists the groups to which this user belongs.
   • The Alternate ID is passed to the User Key field. This field usually holds the user’s Google email address.
3. The List – For Each card calls a helper flow to remove a user from each Google group.
   • The helper flow receives two inputs:
     • The Group ID from each group
     • The Alternate ID is the user’s Google email address

Remove user from group helper flow

This is the helper flow:

In this flow:

1. The Helper Flow card has two inputs:
   • The Group ID from each group (as the flow iterates over the group list).
   • The User Email is the user’s Google email address
2. The Google – Remove User from Group card removes a user from a group.

Related Workflows guides

• How to Remove a User From Groups When the User Is Deactivated
• How to Setup a Workflows Helper Flow (With For-Each and Streaming Cards)

Workflows resources

🍫 Get help from Workflows specialists during weekly community office hours.

📺 Learn from Workflows videos.

🛟 Get help from support: discuss a Workflows topic or ask a question.

🙋🏻‍♀️ Get help from the community: join the #okta-workflows channelon MacAdmins Slack.