Catch deleted identity event

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hey everyone,

I’m seeking advice about an issue we’re having with removed identities related to “No-shows”.
When someone decide not to show up or we simply cancel his onboarding, the Workday account is no more visible to IdentityNow which simply removes the identity. However, all the remaining accounts are still there, and active, which leads to serious security risks. AD, Entra ID and Google accounts, just to name, are still active, and the user can use them.
Is there a way to detect when an identity is removed and act upon it to disable the related accounts? If not, what would you recommend as a solution?

Thank you for your answers.
Best,

2

If you have the workflows capability you can use this:

Alternatively, perhaps you can look at the rescind settings on the workday connector?

3

Hi @sauvee ,
Thank you for your feedback. I guess we were missing the “Rescinded” config on our Workday source. We’ve adjusted our settings accordingly but have no rescinded offer now to test. However, the next aggregation added more than 10 users, I guess they represent past rescinded offers, so I’d say the config is working fine.
I’ll keep you posted anyway.