Google Workspace has rolled out a new automated account management feature designed to close a common but serious security gap: staff accounts that stay active after someone leaves the business.

• What it is: Google Workspace now supports SCIM-based identity management, which automatically updates or removes a user's Workspace account the moment their status changes in your HR or identity system.
• Who is affected: Businesses using Google Workspace, particularly those that currently rely on manually removing accounts when an employee leaves or changes roles.
• The risk: Manually managed accounts are easy to forget. An account left active after someone departs is a common way former staff, or attackers who compromise old credentials, retain access to email and files.
• What to do: If your business has more than a handful of staff, connecting Workspace to an identity provider with SCIM support removes the risk of a forgotten account being left open.

We recommend reviewing your current offboarding process and considering automated deprovisioning if staff turnover means accounts are not always closed promptly. Source: Google Workspace Updates.