IBM MaaS360

 View Only

 Automatically lock devices for terminated employees?

Ben Silver's profile image
Ben Silver posted Tue February 11, 2025 05:43 PM

Hello! How do y'all handle employee terminations?

Obviously we want to lock the machine as soon as it happens... so right now we have to manually on call to lock down someone's machine when they're offboarded.

We have Okta configured for MaaS360 enrollment, so I was wondering if it would be possible to signal MaaS360 to lock the device if a user is suspended in Okta

Has anyone done something like this?

Jason VenHuizen's profile image
Jason VenHuizen IBM Champion posted Tue February 11, 2025 06:11 PM

Hi Ben,

 

We use Microsoft Entra with InTune to manage our devices and revoking the user account also revokes access to the device.  We also have the option to remotely lock and restart the device so this effectively allows us to lock someone out of the device when they are leaving the company.

It looks like you can remote restart pretty much any device, so after locking the account you can restart the device and ensure they are not logged in.

https://www.ibm.com/docs/en/maas360?topic=management-device-actions-by-device-operating-system

That requires that the device be connected, but in the scenario you are discussing I assume that is the case.

 

Regards,

Jason

Eamonn O'Mahony's profile image
Eamonn O'Mahony posted Wed February 12, 2025 04:25 AM

Hi Ben

Through an integration with IBM Verify you can synch user directory and take the necessary measures. 

A native integration through SAML is also possible and this could import and create new users but won't synch their status. 

Just to check, is Okta your system of record or is it pulling user status from another system such as LDAP, Microsoft AD OnPremise or Azure / EntraID? 

If so MaaS360 can also synch with those user systems and take action on disabled users without needing the Verify integration. 

Best regards

For further information: 

Switching on Verify and other integrations in the Services page: https://www.ibm.com/docs/en/maas360?topic=setup-configuring-services-in-maas360-portal

Setting up MaaS360 / Verify integration - https://docs.verify.ibm.com/verify/docs/integrating-maas360