Spot the Orphaned Seat
Identify a residual SaaS account that offboarding must close.
Central identity is disabled, but the app still has residue. Find the offboarding residue. Inactive local SaaS seat still present in the app user list Correct. A local SaaS account can remain even after central identity is disabled, so AC-2 offboarding is not complete. Central identity dashboard showing disabled status This is good evidence, but it is not enough. The issue is the local app account that survived the central disable. Empty chair at the audit desk The empty chair is visual context. The offboarding risk is in the SaaS account state. License folder on the desk License review matters,…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in