Most companies that have an IdM system have 2 ways to deprovision users:
- Emergency Termination Workflow (where a manager logs on to the deprovisioning workflow, and kicks off the termination process that disables accounts across the board)
- Automated Terminations (where the IdM system keys off of HR or Payroll or some authoritative store that provides the user's status and termination date which in turn automatically disables accounts)
The only problem with this approach is the lack of motivation for an end-user to run through the workflow. Perhaps there is an approach to tie the completion of this workflow to some interest for the end user that will motivate him/her to run through it. Some ideas...
- Severence Pay
- COBRA Enrollment
- Continued Communications (to enter in personal e-mail address?)
- An iPhone? (seems to work for other things)
I bet that this approach would solve some of the data-timeliness issues. What do you think?