Is there a way to bulk delete Identities?

[gespinosac (Gabriela Espinosa)]

The authoritative source connector has been already deployed and after that I needed to add a filter for the account aggregation task. Now, I need to delete about 500 identities cubes related to that filter, is there a way to bulk delete all these Identities?

[girishkms1 (Girish Kumar M S)]

Hello @gespinosac
you should try to delete the authoritative source account using Delete Account API.
That should delete the identity as well.

Thanks

[TJ21 (Tom Cipriano)]

Bulk delete identities without checking the "Disable Account Deletion"

Sometimes the systems we connect to may require us to retain old identities when they no longer are coming in from the endpoint during an aggregation. This can be due to a “delta” flat-file which only has recent users (in case of a simple flat-file connector) or when the REST API used for aggregation only gets the recent users, say going back a year. In such cases if “Disable Account Deletion” is checked, it will delete the users not in the recent aggregation, which is not ideal. Unchecking th…

[ashutosh08 (Ashutosh Singh)]

Hi @gespinosac,

Welcome to SailPoint Developer community.

You can delete identity by following one of the below processes:

1. You can use the configuration at your source to delete the account if it is not coming from target and then in turn it will remove identity via Identity Profile. Screenshot for source delete configuration is given below.

2. You can also delete the identity from Identity List page, there you can select the identity that you want to delete and then from action you can delete these identities.

3. For temporary basis you may use Beta - API to delete identity. Document reference is given below.

delete-identity | SailPoint Developer Community

Thanks

[JyothiAtikes (Jyothi Katakam)]

Hi @gespinosac ,

Have you tried using a search filter to identify and delete the identities? You can leverage SailPoint’s search functionality to filter and then bulk delete the identities.

[amitvibhute]

We have a similar requirement to delete 30000 identities. I have tried testing the DELETE IDENTITY Beta API but that API only deletes the identity, it shows “Remove account”, “Remove Role” & “Remove Entitlements” events in the access history but when I check the actual Active Directory account of that user, the entitlements are not removed. Will this be achieved if I use the Delete Account API to delete the Auth. Source account ? will it remove the entitlements first & then delete the Identity in IDN ? Or is there any better way to achieve this ?