{
  "slug": "offboarding-orphaned-authority",
  "title": "They left in March. Their access did not.",
  "summary": "Disabling the identity provider account revokes a login, not an authority. Why offboarding never finishes, and what chain anchored issuance changes.",
  "lede": "Disabling someone's identity provider account revokes a login. It does not revoke the authority that person created while they worked there. Those are different things, and almost every offboarding programme confuses them.",
  "date": "2026-09-13",
  "reading_time": "18 min read",
  "category": "Security",
  "tags": ["offboarding", "deprovisioning", "orphaned accounts", "non-human identity", "revocation", "access management", "insider risk"],
  "image": "https://cdn.twc.sh/images/igcache/Orphaned%20Authority/1200_630/blog.jpg",
  "url": "/blog/offboarding-orphaned-authority.html",
  "wordcount": 4368,
  "related": ["authority-graph", "revocation-that-propagates", "identity-continuity-hire-to-offboard"],
  "schema": "Article"
}