Skip to main content
Level 1
May 18, 2026
Solved

System removing User access

  • May 18, 2026
  • 4 replies
  • 54 views

Hello,

I had a few examples pop up in the last few days. Some of my users access was deactivated by the system. In all cases, these are active users using Workfront daily.

Has anyone encountered this before or at least in the last week?

Thanks in advance!

John

Best answer by StutiTi

Hi ​@JohnMa20 , Hi ​@Srinija_N  , 

If your organization uses SSO/IMS, user access is generally managed centrally through the Adobe Admin Console and your Identity Provider (IdP). In many cases, when users appear to get “randomly” deactivated in Workfront, the trigger actually comes from the identity management side rather than Workfront itself. For example, if a user is removed from a synced group, loses a product profile assignment, or their entitlement changes in the Admin Console or IdP, Workfront will automatically deactivate the user during the next sync cycle.

I’d recommend checking the Adobe Admin Console Audit Logs to verify whether the affected users or their groups were removed from the Workfront product profile. You can review this under Admin Console → Insights → Logs and filter/search for the impacted users. If the action was performed directly inside Workfront instead, the Workfront Audit Log should show which user made the change.

4 replies

Srinija_N
Level 7
May 18, 2026

yes, we faced similar issue couple of weeks ago and still happening for some random users though. That could be due to console access and the SSO authorization. 

 

Would like to know the real reason!!

If this helped to solve your problem, please mark it as 'solved' so others can also find the solution faster. Thanks!
ninoskuflic
Level 5
May 18, 2026

Unless there was a scheduled deactivation date set on their profile, they should not be deactivated automatically. Did you check the Workfront and Admin Console logs?

If this solved your issue, please mark it as solved so others can find the solution faster.
StutiTiAdobe SupportAccepted solution
Adobe Support
May 20, 2026

Hi ​@JohnMa20 , Hi ​@Srinija_N  , 

If your organization uses SSO/IMS, user access is generally managed centrally through the Adobe Admin Console and your Identity Provider (IdP). In many cases, when users appear to get “randomly” deactivated in Workfront, the trigger actually comes from the identity management side rather than Workfront itself. For example, if a user is removed from a synced group, loses a product profile assignment, or their entitlement changes in the Admin Console or IdP, Workfront will automatically deactivate the user during the next sync cycle.

I’d recommend checking the Adobe Admin Console Audit Logs to verify whether the affected users or their groups were removed from the Workfront product profile. You can review this under Admin Console → Insights → Logs and filter/search for the impacted users. If the action was performed directly inside Workfront instead, the Workfront Audit Log should show which user made the change.

JohnMa20Author
Level 1
May 20, 2026

@StutiTi - Thank you for the information - that did clarify my issue. It appears we did some clean up for other Adobe applications in our organization. Appreciate all the comments!