What Will Happen If a User is Deleted on an External IdP while the Auth0 Session is Valid in the SAML Connection

Overview

This article clarifies what will happen if a user is deleted on an external IdP while the Auth0 session is valid in the SAML connection.

Applies To

  • SAML connection
  • Deleted user
  • External IdP

Solution

Auth0 does not proactively query the IdP to check the status of the logged-in user. Therefore, the user will be allowed to use the application while maintaining the login status until the session expires. SCIM would be a solution to synchronize the user’s status from IdP to SP (Auth0 in this case).

Related References