Centrify Identity ServiceQuestion:
If a User is disabled, or deleted in source directory (typically Active Directory), but de-provisioning rules are not configured to delete the User from Office 365 when deleted or disabled from source directory, then the User object will be orphaned in Office 365.
Most common scenario to create this situation is:
1. User is disabled in source directory, prompting a de-provision event to remove the license in Office 365.
2. User is later deleted, but the de-provisioning rule to delete the user when deleted from source directory does not take effect. This is because, at this time, Centrify does not sync any changes for disabled Users, including delete events. Scenario 2-
Another, less common scenario that this could occur in, is a failed migration, creating split mailboxes, and the mailbox or user needs to be deleted to re-provision correctly. This will manifest in such a way that the end User is constantly prompted with a popup in Outlook saying, "The Microsoft Exchange administrator has made a change that requires you to quit and restart Outlook"
In both cases: How can an Administrator delete the Federated user after this occurs?Answer:
The commands in this KB are found in the following Microsoft documentation, provided as a courtesy, and should only be used by an Administrator familiar with remote powershell with Azure Active Directory.
1. To remove the User, an Administrator should first connect to Azure Active Directory using remote powershell. Instructions can be found here, if needed (provided as a courtesy).
2a. Next, an Administrator will need to run the following two commands. One to remove the user, and the next to flush from the recyclebin.
- Remove-MsolUser -UserPrincipalName <userprincipalname>
- Remove-MsolUser -UserPrincipalName <userprincipalname> -RemoveFromRecycleBin
with the actual UPN, e.g. firstname.lastname@example.org
2b. The following command can be used to remove Office 365 Groups
- Get-MsolGroup -SearchString "GroupName" | Remove-MsolGroup
For additional information not covered in this guide or troubleshooting assistance, please review Centrify Online Help
or visit the Customer Support Portal