We just shipped the bookend to an earlier template: automated identity checks on employee onboarding, not just offboarding.
Most onboarding automations handle one thing: create the account, grant access, done. This template adds the question that usually gets skipped. Does this new hire’s personal email already show signs of exposure (a breach, a stealer-log hit) before you hand them a corporate identity?
How it works:
- Your HR system POSTs to a webhook when a new hire is ready to onboard
- Two things happen in parallel, independently of each other: a RelayShield identity check on the personal email (breach + infostealer exposure), and account provisioning (Google Workspace or Microsoft Graph)
- A risky personal email doesn’t block day-one access. It’s logged to Notion and flags Security in Slack as an awareness item, not a gate
- Provisioning success/failure is tracked as its own separate outcome, so a failed account creation gets its own alert regardless of what the identity check found
Same shape as the offboarding template, opposite direction: perform an identity security check on the way in instead of the way out.
Live template: Login - n8n.io
Happy to answer questions if anyone’s adapting it for their own HR/IT stack.