Deleted users reappear the next day

Products

• CASB Audit
• CASB Gateway Advanced
• CASB Security Premium
• CASB Security Standard
• CASB Securlet SAAS
• CASB Securlet IAAS
• CASB Security Premium IAAS
• CASB Security Advanced
• CASB Gateway

Issue/Introduction

The customer deletes users, but then the users reappear in the user list the next day.

Cause

The securlet for a SaaS application lets CloudSOC obtain user information, and CloudSOC uses the information to auto-import users. If the users are in the seccurlet, they will be automatically resynced to cloudSOC.

Resolution

The customer must first delete the user from the securlet cloud application (onedrive, google drive, etc.) and then delete the user from CloudSOC.