Secure user state management flow
User provisioning ingests user data from various providers and categorizes users into either of the following states: “active,” “inactive,” or “suspended.” Challenges arise when businesses need to handle "inactive" and "suspended" users differently based on unique security requirements.
For all new environments, WorkOS will now default to deleting all users that are in “inactive” or “suspended” states to provide cleaner and more secure data. This will result in a user.deleted webhook to prevent systems from retaining unnecessary information of inactive users.
Alternatively, customers can opt to retain the existing workflow to optimize for a more seamless reactivation process. To continue preserving both "suspended" and "inactive" user data in the directory, please email email@example.com.
More information can be found in docs.