Hello,

I have two external resources working fine (AD and PostgreSQL database) as well 
as a synchronize task from the AD.

The sync task does create and update all users in syncope and in the database, 
but it does not remove any users (deprovision). For example if I delete a user 
in AD it doesn't get deleted from Syncope's internal users and therefore not 
from the external resource either.

This same applies when I edit a previously synchronized user in Active 
Directory so that it doesn't meet connectors membership or accountSearchFilter 
rules anymore - it does not get removed from Syncope and other resources.

What am I missing?

The Synchronization Task has only Matching (update) and Unmatching (provision). 
Should it have at least a third matching rule: Source Missing Rule - which 
would most likely always be used for deprovisioning?

Best regards,
Juhani Kettunen

Reply via email to