# Accounts for Leaver process are not disabling when user is terminated

**URL:** <https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397>\
**Category:** SHF Discussion and Questions\
**Tags:** lifecycle-management, sailpoint-identity-security, provisioning\
**Created:** [April 4, 2024, 6:48pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397 "2024-04-04T18:48:14Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![mbender](https://avatars.discourse-cdn.com/v4/letter/m/a88e4f/32.png) [@mbender](https://developer.sailpoint.com/discuss/u/mbender)\
**Post date:** [April 4, 2024, 6:48pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/1 "2024-04-04T18:48:14Z")

</div>

Hello, we are currently testing the leaver process within our sandbox tenant but when our HR system sets the identity to “terminated” and the test identity’s lifecycle state is updated to “terminated” in SailPoint, it is not triggering the disable account provisioning that we have set up under the identity profile. We are mapping the lifecycle state directly from the authoritative source “ADP” with the identity attribute “WorkerStatus”. We ensured that the provisioning is enabled under the identity profile for “terminated” which should trigger the Wesbanco-AD account the test identity has enabled to be disabled.

 ![lifecycle state mapping](https://global.discourse-cdn.com/sailpoint/original/2X/6/63746d1ded93d86034e9206f636916bc7f8dc238.png)  
 ![lifecycle state provisioning](https://global.discourse-cdn.com/sailpoint/original/2X/6/6fa4cd6cc8c00aeeb75275504026a4a9b1a766e4.png)

---

<div class="post-metadata">

**Author:** ![jesvin90](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jesvin90/32/5301_2.png) [@jesvin90](https://developer.sailpoint.com/discuss/u/jesvin90)\
**Post date:** [April 8, 2024, 10:29am UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/2 "2024-04-08T10:29:16Z")

</div>

Hi @mbender,

Can you please verify if the lifecycle state of the test user matches the exact case of the technical name, which is **terminated**

---

<div class="post-metadata">

**Author:** ![Arshad](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@Arshad](https://developer.sailpoint.com/discuss/u/Arshad)\
**Post date:** [April 8, 2024, 12:29pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/3 "2024-04-08T12:29:21Z")

</div>

@mbender Can you let us know the values you would receive for `WorkerStatus` attribute for a user on **ADP connection** source ?

---

<div class="post-metadata">

**Author:** ![mbender](https://avatars.discourse-cdn.com/v4/letter/m/a88e4f/32.png) [@mbender](https://developer.sailpoint.com/discuss/u/mbender)\
**Post date:** [April 9, 2024, 3:51pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/4 "2024-04-09T15:51:59Z")

</div>

Here’s a screenshot of the lifecycle state the identity has listed in SailPoint and a screenshot of the provisioning settings:

 ![test user lifecycle state](https://global.discourse-cdn.com/sailpoint/original/2X/1/1aa5551da9fcf17ed783c14a6a82b43855df2c2e.png)  
 ![Terminated provisioning settings](https://global.discourse-cdn.com/sailpoint/original/2X/2/2492d5fb6e468dc1e93e07f607f3b652c7623d49.png)

---

<div class="post-metadata">

**Author:** ![mbender](https://avatars.discourse-cdn.com/v4/letter/m/a88e4f/32.png) [@mbender](https://developer.sailpoint.com/discuss/u/mbender)\
**Post date:** [April 9, 2024, 3:53pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/5 "2024-04-09T15:53:59Z")

</div>

The current WorkerStatus value for our test user identity shows that the user is listed as “Terminated” under their ADP Account.  
 ![workerstatus](https://global.discourse-cdn.com/sailpoint/original/2X/8/8c1cdc279a41f1b94fe863c79987214687446678.png)

---

<div class="post-metadata">

**Author:** ![jesvin90](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jesvin90/32/5301_2.png) [@jesvin90](https://developer.sailpoint.com/discuss/u/jesvin90)\
**Post date:** [April 9, 2024, 4:03pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/6 "2024-04-09T16:03:43Z")

</div>

Hi @mbender,

The only reason I can think of is that if the AD account is already in a disabled status, the disable action will not be triggered. And I assume that the user actually moved from active to terminated status after the LCS configuration was enabled.

Or do you have some before or after provisioning rule that might be modifying the plan.?

If not, it would be worth submitting a support ticket.

---

<div class="post-metadata">

**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\
**Post date:** [April 9, 2024, 4:06pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/7 "2024-04-09T16:06:52Z")

</div>

> [@mbender](#):
>
> it is not triggering the disable account provisioning

Have you tried disabling the account `manually` and if it triggers a provisioning process?

---

<div class="post-metadata">

**Author:** ![nandambk](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/nandambk/32/10861_2.png) [@nandambk](https://developer.sailpoint.com/discuss/u/nandambk)\
**Post date:** [April 10, 2024, 8:13pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/8 "2024-04-10T20:13:47Z")

</div>

Hi @mbender, Did you get chance to look at the events or work activity ? if so, you should able to see disable events. Post your activity events for this user

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 9, 2024, 8:14pm UTC](https://developer.sailpoint.com/discuss/t/accounts-for-leaver-process-are-not-disabling-when-user-is-terminated/39397/9 "2024-06-09T20:14:10Z")

</div>

Closed on June 9, 2024, 8:14pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
