Identity and access management · Question 11 of 12
An employee resigns on Friday. Her AD account is disabled, but her access to the cloud CRM, which uses its own account directory, remains. Which lessons are correct?
2 answers are correct. Hard
Show answer
Answer
- B Connect all applications to the central identity provider
- D Process departures for all systems via checklist or automation
Explanation
Applications with their own account directory easily slip through during offboarding. SSO via a central identity provider and automatic deprovisioning (for example via SCIM) ensure that a departure takes effect everywhere.