Summary

As an admin, sometimes we want users to be removed from groups when deactivated

This would apply to local and SCIM synced users

Currently deactivating a user does not remove the user from any groups

User Problem

Sometimes requests are received to remove users from groups after deactivation

Since this doesn't happen automatically additional steps must be taken to remove the user from group

If this is a SCIM synced group, it is required to update the group membership on the IdP, requiring additional steps

Suggested Solutions

Admins should have a choice when deactivating a user whether to leave the user in the existing groups or remove them

Current Workarounds

If a local group, remove the user from group manually or via API
If a SCIM synced group, updated the group on the IdP