Deprovisioning is the removal, disabling or reduction of access when it is no longer needed. It can be triggered by termination, transfer, contract expiry, policy change, review decision, inactivity or the end of temporary access.
Complete deprovisioning includes downstream accounts, groups, entitlements, credentials, sessions and tokens, with verification that the target systems applied the change.