https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/ta-p/2544485 <P class="">When using Qlik Cloud with Qlik's built-in Identity Provider (Qlik IDP), deactivating or deleting a user's corporate email address does not automatically remove or disable their access to Qlik Cloud. This is a common misconception that can create a security gap during employee offboarding.</P><P class=""><STRONG>Symptoms</STRONG></P><P class="">A user's corporate email has been deactivated or their account deleted from the corporate directory. However, the user still appears as active in Qlik Cloud Management Console and their license seat remains occupied. The user may still be able to log in to Qlik Cloud if they have an active session or a previously set password.</P><P><FONT color="#339966"><STRONG>Resolution</STRONG></FONT></P><P>Administrators must manually remove or disable the user directly in Qlik Cloud. To do this, go to Management Console, navigate to Users, find the user and either remove them or change their role to No Access. This should be added as a required step in your organization's employee offboarding checklist.</P><P>If your organization requires automatic user deprovisioning, the permanent solution is to replace Qlik IDP with an external Identity Provider such as Microsoft Entra ID (Azure AD) or Okta, configured with SCIM provisioning. With SCIM enabled, when a user is disabled or removed in your corporate directory, Qlik Cloud is automatically notified and the user's access is revoked without any manual intervention.</P><P>&nbsp;</P><P><STRONG><FONT color="#339966">Cause</FONT></STRONG></P><P>Qlik IDP is a standalone identity store built into Qlik Cloud. It manages user accounts independently from any external corporate directory. Because there is no synchronization between Qlik IDP and external systems, changes made outside of Qlik Cloud such as deactivating an email or removing an Active Directory account have no effect on the user's Qlik Cloud account.</P><P>&nbsp;</P><P><FONT color="#339966"><STRONG>Environment</STRONG></FONT></P><UL><LI>Qlik Cloud Analytics (SaaS)</LI><LI>Qlik IDP (built-in Identity Provider)</LI></UL> Tue, 10 Mar 2026 16:28:31 GMT AnaSilva 2026-03-10T16:28:31Z https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/ta-p/2544485 <P>When using Qlik IDP, disabling a user's corporate email does not remove their Qlik Cloud access. Learn why this happens and how to handle offboarding correctly, including the path to automatic deprovisioning with SCIM.</P> Tue, 10 Mar 2026 16:28:31 GMT https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/ta-p/2544485 AnaSilva 2026-03-10T16:28:31Z https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/tac-p/2544487#M2391 <P>Just asked this question the other day and couldn't find the answer! Thank you!</P> Tue, 10 Mar 2026 16:40:43 GMT https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/tac-p/2544487#M2391 WeLoveQlik 2026-03-10T16:40:43Z https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/tac-p/2544492#M2394 <P>Great information supporting data security.&nbsp; Very insightful.</P> Tue, 10 Mar 2026 17:15:52 GMT https://community.qlik.com/t5/Member-Articles/Qlik-Cloud-with-Qlik-IDP-Users-Are-Not-Automatically-Removed/tac-p/2544492#M2394 jeffreyfairchild 2026-03-10T17:15:52Z