Deleted User Still Appearing in Authorization Extension Groups

Overview

When deleting a user using the API, the user is correctly removed from the system.

The user is no longer visible in the Authorization Extension → Users page, which confirms that the deletion was successful.

However, when navigating to Groups, the deleted user is still listed but appears as an object with the following structure:

{

"user_id": "auth0|...",

"name": "<Error: Not Found>",

"email": "auth0|...",

"identities": [Array]

}

Applies To

  • Authorization Extension

Solution

This is working as expected. Authorization Extension uses its metadata storage (internal or S3, which can be configured when installing the extension), and there is no synchronization between the user’s database and the extension’s metadata storage. So, when a user is deleted in the management dashboard, the authz-extension does not know about it.

  • When navigating to the configuration page, the following message will appear at the end: “Heads up! There is no synchronization taking place between the data in the Authorization Extension and the user’s profile. Any changes made here will only be visible in the user’s metadata next time they log in.”