Quick Actions for IDP and MDM Integrations
Harmony lets you take direct action on users and devices from within the platform, without switching to your Identity Provider (IDP) or Mobile Device Management (MDM) console. Quick actions are available across your connected integrations and help you respond faster to security events, streamline user lifecycle management, and manage devices without leaving your workflow.
This article describes every quick action available, which integrations support each action, and how to use them.
Supported Integrations
Quick actions are available across the following connected integrations:
Identity Providers (IDP): Okta, Microsoft Entra, Google Workspace, JumpCloud
MDM providers: Microsoft Intune, Jamf, Kandji, Hexnode, Mosyle, Addigy
Identity Provider Quick Actions
The following actions are available for users managed through your connected IDP. All four supported providers - Okta, Microsoft Entra, Google Workspace, and JumpCloud - support these actions unless noted otherwise.
Reset Password
Trigger a password reset for a user directly from Harmony. The user receives a prompt to set a new password through your IDP's standard reset flow.
When to use: A user's credentials may be compromised, or a user has been locked out and needs to re-authenticate.
Reset MFA
Clear a user's existing MFA methods and require them to re-enroll. This removes all currently registered authenticators and forces the user to set up MFA again on their next login.
When to use: A user has lost access to their authenticator device, or you suspect an MFA method has been compromised.
Deactivate User
Permanently deactivate a user account in your IDP. A deactivated account cannot be used to sign in and is typically not reversible without manual intervention in your IDP console.
When to use: An employee has left the organization and their account should be disabled immediately.
Suspend User
Temporarily suspend access for a user. Unlike deactivation, suspension is reversible and allows you to restore access when appropriate.
When to use: A user account shows suspicious activity and you need to block access while you investigate, without permanently removing the account.
Add to Groups
Assign a user to one or more groups in your IDP directly from Harmony. Group membership controls access policies, application permissions, and other entitlements managed through your IDP.
When to use: A user needs access to a specific application or resource that is gated by IDP group membership.
MDM Quick Actions
The following actions are available for devices managed through your connected MDM provider. Availability varies by provider - see the notes under each action.
Lock Device
Remotely lock a managed device. The device becomes inaccessible until a PIN or password is entered.
When to use: A device is lost, stolen, or left unattended in an unsecured location.
Wipe Device
Send a remote wipe command to erase all data on a managed device. This action is irreversible.
When to use: A device is lost or stolen and data on the device must be protected from unauthorized access.
Restart Device
Remotely restart a managed device without requiring physical access.
When to use: A device is unresponsive or requires a restart to apply a configuration or policy update.
Sync Device
Force a managed device to immediately sync with your MDM provider and pull down the latest policies, profiles, and configurations.
When to use: A device has not checked in recently and may be running outdated policies.
How to Use Quick Actions
Navigate to the relevant Users or Devices view in Harmony.
Locate the user or device you want to act on.
Open the detail panel by clicking the user or device name.
Click the Quick Actions menu or button.
Select the action you want to perform.
Confirm the action when prompted. Some actions - such as Wipe Device or Deactivate User - include an additional confirmation step because they are irreversible.
Harmony sends the action request to the connected IDP or MDM provider. The result is reflected in the integration and, where applicable, updated in Harmony after the next sync.
Notes and Considerations
Quick actions require an active, authenticated connection to the relevant IDP or MDM integration. If a connection is inactive or has insufficient permissions, the action may fail. Check your integration settings if an action returns an error.
Some actions depend on the permission scopes granted when the integration was configured. If an expected action is unavailable, review the scopes assigned to the Harmony integration in your IDP or MDM console.
Irreversible actions - Deactivate User and Wipe Device - cannot be undone from Harmony. You must use your IDP or MDM console directly to recover from these actions if needed.
Actions are logged in Harmony's audit trail so you have a record of who triggered each action and when.
Last updated
Was this helpful?