Just-in-time temporary application access with auto-expiry
Build a workflow triggered by a Slack request specifying user, application, and duration. Route for approval, then grant access in Okta and log a Jira ticket. Schedule automatic revocation at the end of the window using a scheduling/wait mechanism, then deactivate the access and confirm. Handle approval denials, extensions, and revocation failures, and prevent duplicate grants. Output the grant details, expiry time, and revocation confirmation.
What this prompt builds
Grant time-boxed application access from Slack and automatically revoke it when the window ends.
The problem
Standing access accumulates because temporary grants are rarely cleaned up, violating least privilege and expanding the attack surface. Manual revocation after a project ends almost never happens.
Solution and impact
This workflow takes a Slack request for time-boxed access, provisions it in Okta with approval, and automatically deactivates the access when the period expires, tracking it in Jira. Access stays just-in-time and least-privilege without relying on anyone to remember to revoke it.