When deprovisioning users and the Deprovisioning Policy contains steps to move the deprovisioned users to a deactivated users OU and remove all group memberships, the default user groups defined in a separate Provisioning Policy are reapplied and the user is added back to the groups unintentionally.
The Change History for the deprovisioned user shows that the groups were removed, but they appear to remain.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center