AD accounts are deleting after leaver workflow triggered

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Once leaver wf triggered in our production AD accounts are deleting which has termination date prior today. AD link also getting deleted for those users. Please provide suggestion how to stop deleting AD account.

2

Welcome to the SailPoint Developer Community, Rohit.

There is not quite enough information yet to confirm what is triggering the deletion.

For reference, the OOTB Lifecycle Event – Leaver normally disables accounts rather than deleting them, so I would first check whether this is coming from Rapid Setup, a custom workflow, or a rule in the provisioning path.

Could you please share the following for one affected identity?

  • IIQ version
  • whether you are using the OOTB leaver, Rapid Setup, or a custom workflow
  • the provisioning transaction for the delete under Administrator Console → Provisioning
  • whether the AD account itself is deleted, or only the Link disappears in IIQ

That should help narrow down where the Delete operation is being generated.

3

Looks like the Leaver workflow is generating a delete request for AD accounts. Please review the termination workflow and AD provisioning policies to check whether Delete is configured instead of Disable. If accounts need to be retained, the delete operation should be removed or changed to disable.

4

Can you check your rapid setup, for active directory app, and see in leaver options if delete account is enabled and have you selected Now instead of later, and then your configuration

5

@panderoh12 Is this issue still open? Could you please share the relevant details to move forward with troubleshooting.