Hi @JohnMa20 , Hi @Srinija_N ,
If your organization uses SSO/IMS, user access is generally managed centrally through the Adobe Admin Console and your Identity Provider (IdP). In many cases, when users appear to get “randomly” deactivated in Workfront, the trigger actually comes from the identity management side rather than Workfront itself. For example, if a user is removed from a synced group, loses a product profile assignment, or their entitlement changes in the Admin Console or IdP, Workfront will automatically deactivate the user during the next sync cycle.
I’d recommend checking the Adobe Admin Console Audit Logs to verify whether the affected users or their groups were removed from the Workfront product profile. You can review this under Admin Console → Insights → Logs and filter/search for the impacted users. If the action was performed directly inside Workfront instead, the Workfront Audit Log should show which user made the change.