> For the complete documentation index, see [llms.txt](https://docs.harmony.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.harmony.io/settings/quick-actions-for-idp-and-mdm-integrations.md). # Quick Actions for IDP and MDM Integrations Harmony lets you take direct action on users and devices from within the platform, without switching to your Identity Provider (IDP) or Mobile Device Management (MDM) console. Quick actions are available across your connected integrations and help you respond faster to security events, streamline user lifecycle management, and manage devices without leaving your workflow. This article describes every quick action available, which integrations support each action, and how to use them. *** ### Supported Integrations Quick actions are available across the following connected integrations: * **Identity Providers (IDP):** Okta, Microsoft Entra, Google Workspace, JumpCloud * **MDM providers:** Microsoft Intune, Jamf, Kandji, Hexnode, Mosyle, Addigy *** ### Identity Provider Quick Actions The following actions are available for users managed through your connected IDP. All four supported providers - Okta, Microsoft Entra, Google Workspace, and JumpCloud - support these actions unless noted otherwise. #### Reset Password Trigger a password reset for a user directly from Harmony. The user receives a prompt to set a new password through your IDP's standard reset flow. **When to use:** A user's credentials may be compromised, or a user has been locked out and needs to re-authenticate. #### Reset MFA Clear a user's existing MFA methods and require them to re-enroll. This removes all currently registered authenticators and forces the user to set up MFA again on their next login. **When to use:** A user has lost access to their authenticator device, or you suspect an MFA method has been compromised. #### Deactivate User Permanently deactivate a user account in your IDP. A deactivated account cannot be used to sign in and is typically not reversible without manual intervention in your IDP console. **When to use:** An employee has left the organization and their account should be disabled immediately. #### Suspend User Temporarily suspend access for a user. Unlike deactivation, suspension is reversible and allows you to restore access when appropriate. **When to use:** A user account shows suspicious activity and you need to block access while you investigate, without permanently removing the account. #### Add to Groups Assign a user to one or more groups in your IDP directly from Harmony. Group membership controls access policies, application permissions, and other entitlements managed through your IDP. **When to use:** A user needs access to a specific application or resource that is gated by IDP group membership. *** ### MDM Quick Actions The following actions are available for devices managed through your connected MDM provider. Availability varies by provider - see the notes under each action. #### Lock Device Remotely lock a managed device. The device becomes inaccessible until a PIN or password is entered. **When to use:** A device is lost, stolen, or left unattended in an unsecured location. #### Wipe Device Send a remote wipe command to erase all data on a managed device. This action is irreversible. **When to use:** A device is lost or stolen and data on the device must be protected from unauthorized access. #### Restart Device Remotely restart a managed device without requiring physical access. **When to use:** A device is unresponsive or requires a restart to apply a configuration or policy update. #### Sync Device Force a managed device to immediately sync with your MDM provider and pull down the latest policies, profiles, and configurations. **When to use:** A device has not checked in recently and may be running outdated policies. *** ### How to Use Quick Actions 1. Navigate to the relevant **Users** or **Devices** view in Harmony. 2. Locate the user or device you want to act on. 3. Open the detail panel by clicking the user or device name. 4. Click the **Quick Actions** menu or button. 5. Select the action you want to perform. 6. Confirm the action when prompted. Some actions - such as **Wipe Device** or **Deactivate User** - include an additional confirmation step because they are irreversible. Harmony sends the action request to the connected IDP or MDM provider. The result is reflected in the integration and, where applicable, updated in Harmony after the next sync. *** ### Notes and Considerations * Quick actions require an active, authenticated connection to the relevant IDP or MDM integration. If a connection is inactive or has insufficient permissions, the action may fail. Check your integration settings if an action returns an error. * Some actions depend on the permission scopes granted when the integration was configured. If an expected action is unavailable, review the scopes assigned to the Harmony integration in your IDP or MDM console. * Irreversible actions - **Deactivate User** and **Wipe Device** - cannot be undone from Harmony. You must use your IDP or MDM console directly to recover from these actions if needed. * Actions are logged in Harmony's audit trail so you have a record of who triggered each action and when. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.harmony.io/settings/quick-actions-for-idp-and-mdm-integrations.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.