An orphaned account is an account that cannot be reliably linked to a current, accountable owner or enterprise identity. Common causes include incomplete offboarding, failed correlation, owner departure, unmanaged service accounts and acquisitions.
Orphaned enabled accounts are high risk because no one is accountable for their access. IGA should detect, investigate, suspend and either reassign or remove them.