# AD account deletion at source from SailPoint IDN

**URL:** <https://developer.sailpoint.com/discuss/t/ad-account-deletion-at-source-from-sailpoint-idn/69353>\
**Category:** SHF Discussion and Questions\
**Tags:** sailpoint-identity-security\
**Created:** [June 27, 2024, 6:02am UTC](https://developer.sailpoint.com/discuss/t/ad-account-deletion-at-source-from-sailpoint-idn/69353 "2024-06-27T06:02:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![V-VanishreeC](https://avatars.discourse-cdn.com/v4/letter/v/90ced4/32.png) [@V-VanishreeC](https://developer.sailpoint.com/discuss/u/V-VanishreeC)\
**Post date:** [June 27, 2024, 6:02am UTC](https://developer.sailpoint.com/discuss/t/ad-account-deletion-at-source-from-sailpoint-idn/69353/1 "2024-06-27T06:02:12Z")

</div>

Hi All,

I need help deleting AD accounts at source directly from SailPoint IDN.

According to the documentation, only accounts from delimited file sources can be deleted. I’ve read about using a before provision rule to accomplish this, but I’m unsure about the approach.  
Could you please suggest a quicker solution?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Abhinov7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/abhinov7/32/13253_2.png) [@Abhinov7](https://developer.sailpoint.com/discuss/u/Abhinov7)\
**Post date:** [June 27, 2024, 6:42am UTC](https://developer.sailpoint.com/discuss/t/ad-account-deletion-at-source-from-sailpoint-idn/69353/2 "2024-06-27T06:42:00Z")

</div>

Hi,

I think we have very limited ways to achieve deletion of accounts in ISC.

1. You can use AD after operation rule to invoke powershell script and in powershell script write code to delete AD account.
2. In before provisioning rule change the operation to delete in plan.

> **[Before Provisioning Rule | SailPoint Developer Community](https://developer.sailpoint.com/docs/extensibility/rules/cloud-rules/before-provisioning-rule)**
>
> This rule runs before provisioning to a source.

-Abhinov

---

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [June 28, 2024, 2:23am UTC](https://developer.sailpoint.com/discuss/t/ad-account-deletion-at-source-from-sailpoint-idn/69353/3 "2024-06-28T02:23:13Z")

</div>

Hi @V-VanishreeC ,

To use the second approach from @Abhinov7 response, you could create a new LCS that the Identities will enter after some time and configure the IdentityProfile to Enabled the AD account, but using the BeforeProvisioning you will change the operation to Delete and the account will be deleted.

Just keep in mind that maybe if the Identity it’s left with some Role that gives AD access IDN could create a new account once a refresh identity runs.

Regards,

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 27, 2024, 2:23am UTC](https://developer.sailpoint.com/discuss/t/ad-account-deletion-at-source-from-sailpoint-idn/69353/4 "2024-08-27T02:23:30Z")

</div>

Closed on August 27, 2024, 2:23am UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.