This article clarifies the behavior of the Deactivate Users button in Provisioning. It addresses why enabling this feature does not synchronize or deactivate users who were unassigned from the application before the setting was enabled.

• Provisioning

The Deactivate Users button in an application's provisioning settings must be enabled for the deactivation feature to function. The behavior of this setting follows specific rules:

• This setting is not retroactive. It only applies to deactivation or unassignment events that occur after the feature is enabled.
• The feature does not synchronize or deactivate users who were already unassigned from the application before the setting was enabled.
• Deactivation events are sent to the downstream application only at the moment a user's application assignment is terminated (either by unassignment or user deactivation).
• If this option is disabled when an application assignment is terminated, no deprovisioning event is sent.
• Enabling the Deactivate Users setting after these events have already occurred does not trigger any new deprovisioning events, as the user is no longer assigned to the application.