Provision, update, and remove access in disconnected applications.

Execute JML changes inside disconnected applications—creating accounts, updating permissions, and revoking access through their interfaces—so lifecycle requests are completed without waiting on manual administration.
Download Datasheet

Extend JML coverage beyond native provisioning support.

Put existing lifecycle requests to work in SaaS, internal, legacy, and on-premises applications where account administration remains manual.

Redblock performs the application-side operations through the administrative interface. This extends coverage to applications with missing provisioning APIs, incomplete connectors, or SSO that leaves account and entitlement management untouched.

Complete the account and access changes each request requires.

Your existing identity platform or approved ticketing workflow supplies the request and authorized scope. Redblock performs the corresponding operations inside the application.

1Request
From SailPoint

Joiner: Daniel Okafor

Create account in Claims Portal with Adjuster role. Starts Monday.

Approved
2Executed in the app
Claims Portal · Admin · Users
User managementNo connector · no API
User
Role
Active
JAJ. Alvarez
Adjuster
MCM. Chen
Analyst
DOD. OkaforNew
Adjuster
3Verified

Joiner complete

  • Account created
  • Adjuster role assigned
  • Change re-checked in app
Screenshot evidence attached
Ticket updated · 9:02 AM
1Request
From Okta

Mover: Mei Chen

Role change in Claims Portal: Analyst to Supervisor. Effective today.

Approved
2Executed in the app
Claims Portal · Admin · Users
User managementNo connector · no API
User
Role
Active
JAJ. Alvarez
Adjuster
MCM. Chen
AnalystSupervisor
PSP. Shah
Supervisor
3Verified

Mover complete

  • Supervisor role added
  • Analyst role removed
  • Change re-checked in app
Screenshot evidence attached
Ticket updated · 11:18 AM
1Request
From ServiceNow

Leaver: Priya Shah

Remove all access in Claims Portal. Effective today.

Approved
2Executed in the app
Claims Portal · Admin · Users
User managementNo connector · no API
User
Role
Active
JAJ. Alvarez
Adjuster
PSP. Shah
Supervisor
MCM. Chen
Analyst
3Verified

Leaver complete

  • Account disabled
  • 3 roles removed
  • Change re-checked in app
Screenshot evidence attached
Ticket updated · 2:41 PM

Works with.

Works with your IGA, identity provider, and ticketing tools, including SailPoint, Saviynt, Okta, Microsoft Entra, ServiceNow, and Jira.

Evidence and Outcomes

Completed changes, with evidence your team can review.

Admin queue
Waiting 0Handled by agent 3
C
Claims PortalJoiner · just now
Handled by agent
V
Vendor BillingMover · 4 min ago
Handled by agent
L
Legacy HR appLeaver · 12 min ago
Handled by agent

Fewer administrator handoffs

Redblock signs in to the application and makes the change that an administrator would otherwise make by hand. Lifecycle requests no longer wait in someone’s queue.

Recent changes
ChangeStatus
Vendor BillingJoiner · 9:02 AM
Verified
Claims PortalMover · 11:18 AM
Verified
Legacy HR appLeaver · 1:05 PM
Needs follow-up
Claims PortalLeaver · 2:41 PM
Verified

A verified result for every change

After each change, Redblock checks the application’s state. Your workflow gets a confirmed result, and anything that could not be verified is flagged for follow-up, never reported as done.

Change log export
App: Claims PortalQ3Leavers
Included in export
Request, account, change
per row
Verification and timestamp
per row
Screenshot evidence
linked
Export for audit

Proof for auditors

Each change keeps a record tying the request to the account, the change, and how it was verified, returned to your IGA, identity provider, or ticket.

Practical Questions.

What is needed to enable a JML workflow for an application?

An approved request source, attributes for identifying or creating the account, the permitted operations, and authorized application access. The scope also defines the application state that will confirm completion.

Can we begin with offboarding?

Yes. Start with a defined leaver workflow and the applications where access removal remains manual. Additional joiner and mover operations can be scoped as coverage expands.

What happens if an application’s interface changes?

An interface change can affect execution. An operation that cannot be completed or whose result cannot be verified requires follow-up before it can be treated as complete.

Does disabling an account also terminate sessions and revoke credentials?

That depends on the application. Account disabling does not establish that every session, API key, or other credential has been revoked. Those operations must be included where required and verified separately.

Can Redblock run inside our environment?

Redblock supports deployment in a dedicated VPC or on-premises environment. Deployment and application-access requirements are assessed against the workflows you want to cover.

Bring a JML workflow your team
still performs manually.

Tell us which applications require manual provisioning, access changes, or offboarding. We’ll walk through the relevant workflow and discuss how to evaluate it in your environment.

Book a Demo
Book a Demo