Secure user state management flow

October 26, 2023

User provisioning ingests user data from various providers and categorizes users into either of the following states: “active,” “inactive,” or “suspended.” Challenges arise when businesses need to handle "inactive" and "suspended" users differently based on unique security requirements.

For all new environments, WorkOS will now default to deleting all users that are in “inactive” or “suspended” states to provide cleaner and more secure data. This will result in a user.deleted webhook to prevent systems from retaining unnecessary information of inactive users.

Alternatively, customers can opt to retain the existing workflow to optimize for a more seamless reactivation process. To continue preserving both "suspended" and "inactive" user data in the directory, please email

More information can be found in docs.

This site uses cookies to improve your experience. Please accept the use of cookies on this site. You can review our cookie policy here and our privacy policy here. If you choose to refuse, functionality of this site will be limited.