This solution requires Identity Manager and Sentinel™ or Sentinel RD.
After a user is provisioned to a resource, Sentinel tracks the users’s utilization of that particular resource. If a resource is not used for a specified number of days, an Identity Vault job is initiated that starts a de-provisioning action. This allows you to validate whether users who are provisioned to resources are utilizing those resources.
The following sections outline the steps required to implement this scenario.