KeySkopeUse case / Offboarding
They left.
What stayed behind?
Find application accounts that remain enabled after the linked identity becomes inactive.
The review question
Leavers with live access
Confirm the identity is inactive, inspect the remaining application accounts and ask the app owner whether access should end.
Explore the findingREVIEW WITH CONFIDENCE
Make the next step clear.
Do not assume that every remaining account is an error. Shared functions, role changes and identity-source gaps need context.
From finding
to follow-through.
Use the source evidence to make an informed decision with the application owner.
01 / CHECK
Confirm the source.
Check that the connector has completed a recent successful sync and that you are reviewing the right environment.
02 / REVIEW
Understand the account.
Inspect roles, ownership and available activity. Resolve any missing context with the app owner.
03 / FOLLOW UP
Close the loop.
Make approved changes in the source application, then sync again to check the updated account information.