The Identity Panel Suite from SoftwareIDM provides comprehensive capabilities for managing the full identity lifecycle, including the ability to disable, move, and delete user accounts—along with related secondary or linked accounts—across Active Directory (AD) and downstream systems. Whether triggered manually, automatically by policy, or based on changes in authoritative data sources such as HR systems, this functionality ensures consistent, timely deprovisioning of access.
This is achieved through HyperSync Panel, the suite’s powerful synchronization engine. HyperSync Panel can directly manage account deactivation in AD and connected systems, or it can initiate transactions in other systems using API calls, custom workflows, or preconfigured integration rules. It supports both state-based rules (e.g., if an HR record is marked “terminated,” then disable all accounts) and event-based triggers (e.g., on a specific date or attribute change). Identity Panel also supports flexible join rules to identify and link all associated identities—including secondary accounts—for comprehensive account lifecycle management.
Automated and Auditable User Deprovisioning
Using HyperSync Panel, organizations can:
-
Automatically disable or delete accounts in AD when a source system indicates termination
-
Cascade these actions to downstream applications such as Microsoft 365, ServiceNow, Salesforce, or any system with API or directory access
-
Handle secondary accounts and shadow identities using Join Rules and the Identity Graph
-
Trigger external workflows, emails, or ticket creation as part of the deprovisioning process
-
Log and retain a full audit trail of actions taken, ensuring compliance and accountability
This behavior can be initiated by time-based schedules, attribute changes, or manual actions taken through the Service Panel or Access Panel interfaces. Actions can be simulated and reviewed in advance to avoid errors, and organizations may choose to retain deleted identities temporarily for audit or rollback purposes based on configurable retention policies.
Comments
0 comments
Article is closed for comments.