Data Retention & Deletion
Last updated
This page describes how long AOH Sync retains different categories of data and what happens to identity data when a connector is removed or a user is deprovisioned.
Domain directory sync logs are stored with a 90-day expiry stamp. Each log record is written with an expires_at timestamp set to 90 days after the record is created. Records past their expires_at date are eligible for cleanup.
Lifecycle events (joiner, mover, leaver) are stored in both the identity graph and the relational event store. No automatic expiry is configured for lifecycle events in the sources reviewed.
Identity graph nodes and edges represent the current state of your connected sources. When a sync run removes a User from all sources (for example, because the person no longer exists in any connected system), AOH Sync updates the graph accordingly. The mechanics of hard deletion vs. soft deactivation for graph nodes are:
Provisioning configurations, attribute mappings, scheduled jobs, and connector definitions are retained as long as they exist in the AOH Sync configuration. Deleting a connector or an Entra provisioning target removes its configuration record.
Secrets stored in the Vault are retained until explicitly deleted or rotated. When a connector or Entra target is deleted, the associated secret in the Vault should be removed as part of the offboarding process.
When AOH Sync detects that an identity has been removed from or disabled in all connected Source Systems, it records a leaver lifecycle event and updates the identity's status. The provisioning engine then applies the configured leaver action to the target Entra ID tenant (for example, disabling the account or removing group memberships).
When you delete a Source System connector from AOH Sync:
The connector's configuration record is removed from the configuration database.
Subsequent sync runs no longer pull data from that source.
Identity data that was sourced exclusively from that connector remains in the identity graph until a sync reconciliation determines it is no longer present in any remaining source.
Because AOH Sync runs entirely within your Azure subscription, you retain control of the VM and its storage at all times. You can delete all AOH Sync data by deleting the VM and its attached disks from your Azure subscription.
Last updated