Hello Sathish. This looks more like a change-detection issue than a Service Account limitation. I do not see a Rapid Setup restriction that excludes type=service identities from the Leaver trigger.
I would check these first:
- Confirm the Leaver trigger criteria include the Service Account population/type.
- Run Identity Refresh with Process Events enabled.
- Make sure Exclude identities marked inactive is not skipping the account after
inactive=true. - If you use a date-based/delta refresh, enable Include modified identities in the refresh window. This helps include identities changed manually outside normal aggregation/refresh processing: Identity Refresh.
For Changed To, IIQ needs a previous state to compare against the current state. A similar Rapid Setup issue was reported where ChangeTo/ChangeFrom did not fire because the expected trigger snapshot was missing: related thread.
ManagerCertifierAttribute should not control whether the Leaver trigger fires.
For a clean test, set one Service Account to inactive=false, run the refresh, then change it to true and run Identity Refresh again with Process Events enabled. If no Leaver event is created, focus on the trigger/refresh side. If the event launches but the account actions fail, then troubleshoot provisioning.