not getting a hard delete request via a scim provisioning app

Question

Hi,

Azure SCIM documentation says that a user is hard deleted 30 days after he is deleted from Azure(O 365).
30 days were completed today and I was expecting a hard delete request to be issued. Nothing came over.
The time to delete was 1:57 pm central time.

The user was originally deleted on 8/10 and today it is 9/9. How can I trigger a hard delete scim call ?

Answer 1

The SCIM user will only be hard deleted from the connected SCIM app when the user is hard deleted in AAD - which happens 30 days after soft-deletion. To be clear though, there isn't a timer on the provisioning side, the trigger for provisioning is for the hard deletion to happen in AAD. Users can also be hard deleted out of the recycle bin sooner than 30 days.

If the user has already been hard deleted out of AAD and is no longer in the recycle bin in AAD, then another reason why you could potentially see a lack of a hard deletion would be if the user was removed from the provisioning scope prior to the hard deletion happening. Examples of this would be the user being unassigned from the application prior to the hard deletion happening (when provisioning uses "Sync assigned users and groups"), or if the user failed to pass any scoping filter groups on the User mappings section at the time of the hard deletion.

If you think none of these cases is accurate, then please open a support case.

Answer 2

Hello @faisal naeem , Just checking in to see if the above answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,