If your HRIS is connected, Vanta uses it as the primary source of truth for employment status.

After the next sync (typically within about an hour for many integrations) changes to a personnel record's HRIS status can update their employment status in Vanta. In practice, the offboarding workflow is usually available once the personnel record appears as Terminated in Vanta.

If a personnel record appears as Inactive instead of Terminated, Vanta may be missing a usable end date. See Troubleshooting below.

If no HRIS is connected, Vanta uses your identity provider to determine employment status.

Offboarding can start when Vanta detects that the linked IdP account has been deleted, suspended, blocked from sign-in, or otherwise deactivated, depending on the provider. For example:

If your HRIS and IdP are both connected, HRIS data takes priority—deactivating the IdP account alone will not update employment status if an active HRIS record is still linked.

If a personnel record isn't connected to an HRIS or identity provider, employment status won't update automatically. To start offboarding, you'll need to initiate it directly from the personnel record.

To mark the record as Terminated:

This marks the personnel record as Terminated. After that, the personnel record moves into the same Deprovision accounts workflow used for other terminated personnel.

If automated deprovisioning is available for your workspace and supported by the connected integration, Vanta shows these accounts in a separate section.

Once you start deprovisioning, Vanta removes access automatically and updates the status as it verifies removal. No action is needed for these accounts unless you need to override the integration's status.

These accounts still need follow-up. There are two types:

For each account, assign the person responsible for deprovisioning it. By default, Vanta fills this in using the vendor's security owner. You can also reassign an account if ownership is transferring to a current employee.

If you assign systems to personnel groups, Vanta surfaces systems that should be reviewed even when no known account has been found yet.

For each system, either assign the person responsible for confirming whether an account exists and deprovisioning it if needed, or ignore it if confirmation isn't required.

To customize what appears in this section, go to Personnel > People > Groups and update the group’s Offboarding > Access removal settings. See Vendor Scoping by Group for more details.

Once accounts and systems have assignees where needed, click Start deprovisioning. Assignees will receive their tasks and notifications. Notifications are batched and can take up to five minutes to appear.

Assignees complete their work from Access > Deprovisioning tasks—they don't need access to the People page to do this.

Each task includes the system name, account name, former owner, and entitlements. Once the assignee has deprovisioned the account in the external system, they click Confirm account as deprovisioned.

For supported integrations, Vanta automatically closes the task when it detects the account has been deprovisioned.

As assignees work through their tasks, you can monitor the status of each account from the personnel record.

For each account, you can:

For deprovisioned accounts, Vanta records when the account was verified and how—whether via integration or manual confirmation.

If you need to complete offboarding for multiple personnel records at once, you can use bulk offboarding instead of completing each record individually.

To complete offboarding for multiple personnel records at once:

If a personnel record appears in the will not be offboarded group, the reason will be shown in the dialog. Common reasons include:

Resolve the issue shown and then try again.

This usually means Vanta doesn't have the end-date information it needs to proceed with offboarding. This commonly happens when the HRIS has a future end date or doesn't provide a usable end date.

To resolve this:

If the personnel record is linked to both an HRIS and an IdP, HRIS data takes priority. Even if the IdP account has been suspended or deleted, an active HRIS record can prevent the employment status from updating as expected.

A Terminated status means the offboarding workflow is available—it doesn't skip the deprovisioning steps or the final completion step.

You may still need to finish required offboarding tasks or mark monitored accounts as deactivated before Complete offboarding becomes available.

Some providers let you suspend or block sign-in without deleting the account. That can still make offboarding available in Vanta while preserving mailbox access. See Offboarding a User in Vanta while Keeping an Inbox Active for provider-specific guidance.

Go to Personnel > People and use the Offboarding filter. From there, use the task status filters to narrow the list and open individual records that need deprovisioning or final completion.