Reading documentation and it seems to be confusing.
- SAML JIT - It seems users can be created (Provisioned) and updated. I don't see we can Deprovision user using SMAL JIT. Is it correct? can we deprovision user using SAML JIT?
- Registration handler (Auth provider) - It seems user create be created (Provisioned) and updated for social sign-on. can we deprovision user using Registration handler?
- We use Workday and users are created there. Can we provision / deprovision users using SOAP API usert () call on user object from Workday (external system)?
- Identity connect - We can do both user provisioning/deprovisioning using identity connect. right?
It seems we can also have an approval process for user creation using connected app using UserProvisioningRequest object.
Here is my understanding. Appreciate if someone clarify.
Thanks,
Thanks Scott.
Have query on Deprovisining. We use Miscrosoft AD (ADFS). when employee leaves the company we want to deactivate the user in salesforce when its inactivated in AD
As you mentioned AD natively block entry through authentication so if user is inactivated in AD we can't use SAML or OICS registration handler to deprovision users in salesforce/service provider. right?
How could we do this? I know you can do with Identity connect but that requires separate license.
are there any other options? Can we remote call in SOAP API Upsert or Update user method from AD to Inactive users in salesforce? is that a right approach?
