How Can I Onboard and Offboard a User on Cakewalk?

Last updated: January 13, 2026

Cakewalk automates user onboarding and offboarding through Joiner-Mover-Leaver (JML) workflows.

Onboarding a user

  • Connect your HRIS or IdP to sync users automatically.

  • New users are imported and matched with role-based access policies.

  • Admins or Managers can also invite users manually.

Offboarding a user

  • Synced users (HRIS/IdP): Cakewalk creates a "Review offboarding" task. Once confirmed, removal requests are generated.

  • On-demand offboarding: Admins or Managers initiate offboarding directly, which immediately generates removal requests.

Important: Remove Access requests apply only to Managed apps

During offboarding, Cakewalk generates Remove Access requests only for apps with a "Managed" status. Apps in other states — such as Discovered, Tracked, Restricted or Ignored — do not trigger removal requests because they are not fully governed.

To ensure complete offboarding coverage, transition critical apps from Discovered or Tracked to Managed status in the App Governance table.

Useful resources