Workflow - Remove entitlements when a identity turns inactive

[suresh4iam (Suresh Kumar Palanisamy)]

Hello Soundarya,
You may follow the below link which will give you the high level information to your Workflow approach which considers the Workflow limitation, sticky entitlements and AD group default behaviors.

Sticky Entitlements

You can use Before Provisioning Rule to loop through all the assigned entitlements and remove it which could be a custom written code. Since you are using Workflow, you can handle it in Workflow itself by using Certification Campaign. I have implemented the same scenario using Workflow as below. Solution Summary: Trigger the workflow when identity’s LCS changed to inactive. Get the identity details by using Get Identity action. Create a search-based certification campaign to remove all the s…

Let me know whether it helps you.