Issue with Terminated Employees and Deactivating Accounts

Summary:

Issue with Terminated Employees and Deactivating Accounts

Content (required):

Hello Everyone,

In Oracle it is system functionality that once an employee is terminated it can be configured to deactivate their account and remove roles. It is a known issue that if you assign roles to employees not through auto provisioning that even if terminated that user account will stay active and they will keep those roles. This is a topic that has been brought up a few times and Oracle states it is working as designed.

My question is how do you manage this from a business perspective? Oracle Response says run a HDL or remove them manually. I find this to be a bit silly. If an employee is terminated I need to ensure they are not active and can not login to system and I feel you should be able to do so through in system means not through having to run an HDL.