Why are HR Termed Users Still Showing?

This article highlights potential reasons for why terminated users may still display in your Productiv instance. 

• Background
• Why are HR Termed Users Still Showing?
• Example Scenario & Use Case

Background

It's important to note that Productiv does not rely on the termination date (pulled from HR and org chart data) when showing user activity or filtering out termed users.

The system instead pulls data from two main sources:

• SSO login systems. 
• Engagement connectors. 

Because of this, user data is displayed based on the "as of date" for the following scenarios:

• The provisioned licenses “as of a date” (for engagement connectors).
• The “as of date” for licenses assigned to an application (for Okta and OneLogin SSO apps). 

Thus, if a user is provisioned or assigned an app as of a specific date, they will show up in the data regardless of if they've been termed or not. 

Why are HR Termed Users Still Showing?

If a user is showing up after the termination date, this likely means:

• They have access to any applications after their termination date.
• They have used applications after their termination date.
• They have licenses (but not necessarily access) to any applications after their termination date. 

Thus, the number of“ termed” users you see in the data is based on how effectively and quickly your IT or Security team takes away licenses from applications and removes SSO access to these apps. 

Example Scenario

Let's say a user is termed on 9/15, and you are looking at data “as of” 9/16. You would only see the user if:

• When looking at engagement data for an application, the user is still provisioned a license on 9/16.
• When looking at SSO data for an application, the user is still assigned access to the application on 9/16.