After a successful Deprovision, the user will still be a member of Groups which should have been cleared according to the Deprovisioning Policy.
The Change History on the User shows that the User was successfully removed from the group, but then immediately re-added.
Configured Group Membership Autoprovisioning Policies are being triggered and re-adding the User to these groups.
This is a product defect and is being tracked as Defect ID 91866.
WORKAROUND
Configure any applicable Group Membership Autoprovisioning Policies so that there is a conditional check on edsvaDeprovisionStatus having any value, as per the following screenshot:
STATUS
Waiting for a fix in a future release of Active Roles.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center