Recover unused licenses, automatically — without breaking anything.
License Reclaim flags inactive Salesforce users, gets manager approval via signed one-click email links, and auto-deactivates with a reversible grace period. Ten safety checks before any user is touched. Full audit trail. Zero data leaves your org.
From inactive to reclaimed in five auditable steps.
Every transition is logged, reversible up to deactivation, and gated by a manager decision. Dry-Run Mode lets you validate the whole pipeline against your real users before a single account is touched.
Find users who haven't logged in.
A scheduled batch queries every active UserLicense, finds users past your threshold, runs all 10 safety checks, and creates a Warning Case.
Two clicks, one decision.
The user's manager gets an email with a Keep and Revoke link. Each is a signed HMAC token, single-use, time-bounded, and resolves to a decision page that records IP, user-agent, and justification.
Grace period before anything permanent.
On Revoke or timeout, the user is frozen (not deactivated). Frozen users sit for a configurable grace period during which a manager or the user themselves can appeal — reactivation is one click.
Seat reclaimed, ownership transferred.
After the grace period, the user is deactivated and the license seat is freed. Optional: open records (Opportunities, Cases, Leads) re-assigned to the user's manager so nothing falls through.
Annualized run-rate, YTD savings, top departments.
Every reclaim is a dollar-denominated Savings Event. Reactivations net out automatically. The dashboard surfaces the recurring-savings story your CFO actually wants — not just a count of dormant users.
100% on-platform.
No external services, no stored secrets beyond a per-org HMAC key, no outbound callouts except an optional Slack/Teams webhook. The entire pipeline runs in Apex batch + queueable; the UI is Lightning Web Components.
Everything an admin needs to ship this safely.
Dry-Run Mode
Run the entire pipeline against real users without touching a single account. Cases are created, emails are simulated, no DML on the User object.
HMAC-signed approval links
Each manager-decision URL is signed with a per-org SHA-256 HMAC, single-use, time-bounded. No session required — works from any email client.
CFO savings dashboard
Annualized run-rate, YTD savings, top departments by reclaim volume. Reversed (reactivated) events net out automatically — the number you see is the number you really saved.
Slack & Teams notifications
Configure a webhook URL per policy. Every freeze, deactivation, or reactivation posts to your channel. Optional — off by default.
Append-only audit trail
Every approval click, freeze, deactivation, and PSL-unassign is recorded in theh application. Inline justification field for managers. Compliance-friendly.
Global kill switch
One toggle in Setup halts all freezes, deactivations, and emails immediately — mid-cycle, mid-batch, doesn't matter. Reactivate with one click when ready.
Ten checks before any user is flagged.
The integration users, the API users, the queue owners, the sysadmins — none of them get auto-deactivated. License Reclaim runs every candidate through ten orthogonal safety checks, blocks on red flags, warns on amber.
integration@…, api-…, svc-… are blocked. Reclaim the seats you're already paying for.
License Reclaim is delivered as a managed package. Request a claim code — we'll email you the install URL and a one-time activation code; your org is registered and running in under five minutes.
Request a claim codeMonthly and annual subscriptions available!