How to Cancel WSO2 Identity Server

To fully cancel and remove a user account from the WSO2 Identity Server, you need to follow these steps:

Disabling the User Account

Before deleting, you might want to disable the user account to prevent any further activity.

• Start the Identity Server and log into the management console using your tenant credentials.
• Navigate to Main > Identity Providers > Resident > Login Policies > Account Disabling.
• Ensure the Enable Account Disabling checkbox is selected. If not, select it and click Update.
• Go to Main > Users and Roles > List > Users and click on the User Profile of the user account you want to disable.
• Tick the Account Disabled checkbox and click Update.

Deleting the User Account

To delete the user account, follow these steps:

Using the Management Console

• On the Main tab in the Management Console, click List under Users and Roles.
• Click Users. This link is only visible to users with the Admin role.
• In the Users list, click Delete next to the user you want to delete, and then click Yes to confirm the operation.

Using the SCIM 2.0 REST API

You can also delete a user using the SCIM 2.0 REST API:
bash
curl -v -k –user {IS_USERNAME}:{IS_PASSWORD} -X DELETE https://{IS_HOST}:{IS_PORT}/scim2/Users/{SCIM_USER_ID} -H "Accept: application/json"

For example:
bash
curl -v -k –user admin:admin -X DELETE https://localhost:9443/scim2/Users/b228b59d-db19-4064-b637-d33c31209fae -H "Accept: application/json"

You will receive a response with status 204 No Content, indicating the user has been deleted from the userstore.

Removing References to the Deleted User

To comply with data protection regulations like GDPR, you need to remove references to the user’s personally identifiable information (PII).

• Use the Identity Anonymization tool packaged with WSO2 IS to remove references to the user’s PII from metadata database tables, access logs, audit logs, and other log files.

• Run the tool using the following command:
  bash
  ./forgetme.sh -U -d <TOOL_HOME>/conf -T <tenant_domain>

  For example:
  bash
  ./forgetme.sh -U Sam -d <TOOL_HOME>/conf -T carbon.super

  This will replace all occurrences of the deleted user’s identity with either a randomly generated UUID value or a pseudonym.

Stopping and Uninstalling WSO2 Identity Server (Optional)

If you need to completely remove the WSO2 Identity Server, follow these steps:

Stopping the Server

• Click the grey Main tab in the left pane of the WSO2 IS home page.
• Click the Shutdown/Restart command with the green target icon.
• Click the red Graceful Shutdown command.
• Click Yes to confirm stopping your WSO2 IS.

Uninstalling the Server

• In the Administration Console, click Devices > Identity Servers. Select the Identity Server you want to uninstall and click Stop.

• Wait for its health to turn red, then select the server and click to update the cluster configuration.

• Navigate to the installation directory and run the uninstall script:
  bash
  ./uninstall.sh

  Select the option to uninstall the Identity Server and follow the prompts to complete the uninstallation.