Account entitlement
When granted during the Grant step of Enforcement, creates a target user account in the relevant target system, in a disabled state.
When revoked during the Revoke step, permanently deletes the target user account.
Existing accounts
Before granting an Account entitlement, HelloID attempts to find an existing account for the relevant person in the relevant target system, according to the following logic:
HelloID checks whether the person already has an Account entitlement granted in the relevant target system.
HelloID checks whether a matching account can be found in the relevant target system based on correlation settings (only if you have already set up correlation).
If a matching target account is found by either method, HelloID performs an Account Update action on the existing account instead of performing an Account Grant action (i.e., it updates the existing account rather than creating a new one).