[data-colorid=xkru16imyz]{color:#333333} html[data-color-mode=dark] [data-colorid=xkru16imyz]{color:#cccccc}Normally, setting persons to active/inactive is managed in the AD or HR system and handled in Identity Manager via the automatic import. Optionally, they can be available as manual processes. Standard workflowActorActionOptionPhysical IDDigital IDPhysical access1Registration officer or HelpdeskIn Identity Manager: Browses for the person and clicks Deactivate.- 2Identity ManagerSets person to Inactive, removes all roles.- 3Identity ManagerOptionally, locks any connected cards.- 4Identity ManagerExports the card data to the PACS system. 5Identity ManagerLocks any software tokens.- 6CARevokes any certificates.- Technical referencesOptionProcessDeactivate employeeBaseProcDeactivateEmployee (see image)Deactivate contractorBaseProcDeactivateContractorDeactivate visitorBaseProcDeactivateVisitorDeactivate employee and physical IDsCCProcDeactivateEmployeeDeactivate contractor and physical IDsCCProcDeactivateContractorDeactivate visitor and physical IDsCCProcDeactivateVisitorDeactivate employee and digital IDsPcmProcDeactivateEmployeeDeactivate contractor and digital IDsPcmProcDeactivateContractorDeactivate visitor and digital IDsPcmProcDeactivateVisitor