Uploaded image for project: 'Identity'
  1. Identity
  2. ID-8064

Users deleted in Google Workspace are still Active users(accounts) in the organization.

      Issue Summary

      When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

      This causes extra confusion for the admin and raises billing concerns as well.

      Steps to Reproduce

      1. Delete a user in Google Workspace.
      2. Refresh and confirm that the user is successfully deleted.
      3. Refresh the organization where the user was synced.
      4. You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

      Expected Results

      The user should be deactivated and an option to Delete the user should be available.

      Actual Results

      UI displays that the user is being synced from Identity provider, though the user was deleted on IdP(Google Workspace) end.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

        1. image-2022-10-29-00-59-28-109.png
          image-2022-10-29-00-59-28-109.png
          277 kB
        2. image-2022-10-29-00-59-36-939.png
          image-2022-10-29-00-59-36-939.png
          277 kB
        3. screenshot-1.png
          screenshot-1.png
          544 kB
        4. screenshot-2.png
          screenshot-2.png
          1008 kB
        5. User Deleted- GW.mov
          21.29 MB

            [ID-8064] Users deleted in Google Workspace are still Active users(accounts) in the organization.

            Yang Li made changes -
            Resolution New: Not a bug [ 12 ]
            Status Original: Needs Triage [ 10030 ] New: Closed [ 6 ]

            Yang Li added a comment -

            Verified as expected behavior, please refer to https://support.atlassian.com/provisioning-users/docs/set-up-g-suite/ and 'Sync settings for Google Workspace' for the explanation for Gsync paid user behavior and Gsync free user behavior.
            1. For Gsync Paid customer, even though the user was deleted from GSync, the Gsync is designed to sync all changes from GSuite every 4 hrs. If you want the change to happen immediately, a manual sync can be triggered at org admin page. Verified that the above example from video has been deactivated by the time I check.
            2. For Gsync free customer who's not subscribed to Atlassian, the AA user will not be deactivated as described in the public document that "When you suspend, archive, or delete accounts in your Google Workspace, you need to deactivate the account manually in your organization"

            Yang Li added a comment - Verified as expected behavior, please refer to https://support.atlassian.com/provisioning-users/docs/set-up-g-suite/ and 'Sync settings for Google Workspace' for the explanation for Gsync paid user behavior and Gsync free user behavior. 1. For Gsync Paid customer, even though the user was deleted from GSync, the Gsync is designed to sync all changes from GSuite every 4 hrs. If you want the change to happen immediately, a manual sync can be triggered at org admin page. Verified that the above example from video has been deactivated by the time I check. 2. For Gsync free customer who's not subscribed to Atlassian, the AA user will not be deactivated as described in the public document that "When you suspend, archive, or delete accounts in your Google Workspace, you need to deactivate the account manually in your organization"
            Vaishnavi made changes -
            Description Original: h3. Issue Summary

            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns as well.
            h3. Steps to Reproduce
             # Delete a user in Google Workspace.
             # Refresh and confirm that the user is successfully deleted.
             # Refresh the organization where the user was synced.
             # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            {_}+Test recording+{_}:
            * [^User Deleted- GW.mov]

            h3. Expected Results
            The user should be deactivated and an option to Delete the user should be available.

            h3. Actual Results
            UI displays that the user is being {*}synced from Identity provider{*}, though the user was deleted on IdP(Google Workspace) end.

            h3. Workaround
            Currently there is no known workaround for this behavior. A workaround will be added here when available
            New: h3. Issue Summary

            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns as well.
            h3. Steps to Reproduce
             # Delete a user in Google Workspace.
             # Refresh and confirm that the user is successfully deleted.
             # Refresh the organization where the user was synced.
             # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            h3. Expected Results
            The user should be deactivated and an option to Delete the user should be available.

            h3. Actual Results
            UI displays that the user is being {*}synced from Identity provider{*}, though the user was deleted on IdP(Google Workspace) end.

            h3. Workaround
            Currently there is no known workaround for this behavior. A workaround will be added here when available
            Vaishnavi made changes -
            Attachment New: screenshot-2.png [ 429531 ]
            Vaishnavi made changes -
            Attachment New: image-2022-10-29-00-59-28-109.png [ 429530 ]
            Attachment New: image-2022-10-29-00-59-36-939.png [ 429529 ]
            Vaishnavi made changes -
            Description Original: h3. Issue Summary

            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns as well.
            h3. Steps to Reproduce
             # Delete a user in Google Workspace.
             # Refresh and confirm that the user is successfully deleted.
             # Refresh the organization where the user was synced.
             # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            {_}+Test recording+{_}:
            [^User Deleted- GW.mov]
            h3. Expected Results

            The user should be deactivated and an option to Delete the user should be available.
            h3. Actual Results

            UI displays that the user is being {*}synced from Identity provider{*}, though the user was deleted on IdP(Google Workspace) end.
            h3. Workaround

            Currently there is no known workaround for this behavior. A workaround will be added here when available
            New: h3. Issue Summary

            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns as well.
            h3. Steps to Reproduce
             # Delete a user in Google Workspace.
             # Refresh and confirm that the user is successfully deleted.
             # Refresh the organization where the user was synced.
             # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            {_}+Test recording+{_}:
            * [^User Deleted- GW.mov]

            h3. Expected Results
            The user should be deactivated and an option to Delete the user should be available.

            h3. Actual Results
            UI displays that the user is being {*}synced from Identity provider{*}, though the user was deleted on IdP(Google Workspace) end.

            h3. Workaround
            Currently there is no known workaround for this behavior. A workaround will be added here when available
            Vaishnavi made changes -
            Description Original: h3. Issue Summary
            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns.

            h3. Steps to Reproduce
            # Delete a user in Google Workspace.
            # Refresh and confirm that the user is successfully deleted.
            # Refresh the organization where the user was synced.
            # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            _+Test recording+_:
             [^User Deleted- GW.mov]

            h3. Expected Results
            The user should be deactivated and an option to Delete the user should be available.

            h3. Actual Results
            UI displays that the user is being *synced from Identity provider*, though the user was deleted on IdP(Google Workspace) end.

            h3. Workaround
            Currently there is no known workaround for this behavior. A workaround will be added here when available
            New: h3. Issue Summary

            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns as well.
            h3. Steps to Reproduce
             # Delete a user in Google Workspace.
             # Refresh and confirm that the user is successfully deleted.
             # Refresh the organization where the user was synced.
             # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            {_}+Test recording+{_}:
            [^User Deleted- GW.mov]
            h3. Expected Results

            The user should be deactivated and an option to Delete the user should be available.
            h3. Actual Results

            UI displays that the user is being {*}synced from Identity provider{*}, though the user was deleted on IdP(Google Workspace) end.
            h3. Workaround

            Currently there is no known workaround for this behavior. A workaround will be added here when available

            Vaishnavi added a comment - - edited

            Internal notes:
            Problem is reproducible:

            Trying to find a Google user under Google sync in Governator clearly shows that the user details were not found:

            • Identity sync -> Google Sync (link )
            • User account is still active as confirmed from CASSI:

            Vaishnavi added a comment - - edited Internal notes : Problem is reproducible: Test recording : User Deleted- GW.mov Trying to find a Google user under Google sync in Governator clearly shows that the user details were not found: Identity sync -> Google Sync ( link ) User account is still active as confirmed from CASSI:
            Vaishnavi made changes -
            Attachment New: screenshot-1.png [ 429528 ]
            Vaishnavi made changes -
            Description Original: h3. Issue Summary
            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns.

            h3. Steps to Reproduce
            # Delete a user in Google Workspace.
            # Refresh and confirm that the user is successfully deleted.
            # Refresh the organization where the user was synced.
            # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            _+Test recording+_:


            h3. Expected Results
            The user should be deactivated and an option to Delete the user should be available.

            h3. Actual Results
            UI displays that the user is being *synced from Identity provider*, though the user was deleted on IdP(Google Workspace) end.

            h3. Workaround
            Currently there is no known workaround for this behavior. A workaround will be added here when available
            New: h3. Issue Summary
            When the user is deleted in Google Workspace, their account is not de-activated in the synced Organization and is still seen as active and product access is still in place.

            This causes extra confusion for the admin and raises billing concerns.

            h3. Steps to Reproduce
            # Delete a user in Google Workspace.
            # Refresh and confirm that the user is successfully deleted.
            # Refresh the organization where the user was synced.
            # You see that the user is still active, being synced from Identity provider and does not allow you to Deactivate or Delete the user.

            _+Test recording+_:
             [^User Deleted- GW.mov]

            h3. Expected Results
            The user should be deactivated and an option to Delete the user should be available.

            h3. Actual Results
            UI displays that the user is being *synced from Identity provider*, though the user was deleted on IdP(Google Workspace) end.

            h3. Workaround
            Currently there is no known workaround for this behavior. A workaround will be added here when available

              Unassigned Unassigned
              b4b218cdd0b3 Vaishnavi
              Affected customers:
              0 This affects my team
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: