“Leaver - Simple - Remove All Access - fix”
I am noticing weird behavior when removing SailPoint provisioned AD Groups from a workflow using certifications.
Workflow is removing all removable accesses, however SailPoint provisioned AD Groups are re-provisioned by the system.
Sticky entitlement is probably not the cause because native identity (distinguishedName) of the user has not changed.
Also, when I trigger the same workflow second time, it removes the re-provisioned groups without any issues (system is not trying to re-provision).