Close the accounts that should already be closed
Every organisation has accounts for people who left. Adcyma finds them across Microsoft Entra ID and on-prem Active Directory, and automated offboarding stops new ones from appearing.
How accounts get orphaned
Accounts outlive people's employment for ordinary reasons: the leaver was handled in one system but not the other, the contractor's end date was never set, the offboarding checklist depended on someone remembering.
Hybrid environments make it worse. An account disabled in Entra ID can still be alive in on-prem AD, or the other way around. Each forgotten account is a working login with the access its owner had, plus a license someone is still paying for.
- Leavers disabled in one directory but not the other
- Contractor accounts with no end date and no owner
- Licenses paid for accounts nobody has used in months
- No routine that would surface any of this
The short version
How Adcyma solves this
First visibility, then automation: see what exists today, close what should not, and let employment dates keep it clean.
Find what exists
Adcyma shows the accounts in both directories in one place: who each one belongs to, whether that person is still active, and when it was last used.
See the platformAutomated offboarding
Offboarding driven by employment end dates closes accounts the day they should close, in both directories, every time.
See lifecycle managementReviews for the rest
Scheduled access reviews put remaining accounts in front of the people who can say whether they should exist.
See governance featuresHow you get there
Connect both directories
Connect Microsoft Entra ID and on-prem Active Directory so Adcyma sees the whole picture.
Get the report
See which accounts have no active person behind them and where sign-in activity has stopped, across both directories.
Close what should not exist
Run your closing sequence on the accounts confirmed dead: disable, remove access, reclaim licenses.
Keep it clean
Offboarding tied to end dates keeps the pile from growing back.
What changes
Common questions
How do orphaned accounts happen if we have an offboarding checklist?
Checklists depend on someone running them. Vacations, handovers, and systems outside the checklist all create gaps. Automation tied to employment dates does not have those gaps.
Does Adcyma cover both Entra ID and on-prem AD?
Yes. Adcyma connects to both directories, so you work with all accounts in one place instead of checking each directory separately.
What does closing an account actually involve?
You define the sequence: disable sign-in, remove group memberships, reclaim licenses, keep the mailbox for a period if needed, then remove. Adcyma runs it consistently.
Is this a one-time cleanup or ongoing?
Both. The first pass surfaces what exists today, and lifecycle automation keeps it from building up again.
Find out what is in your directory
Start a free 14-day trial and connect your Entra ID tenant. No credit card, no consultants.