Secure Access User Database Via Directory Integration Deletion

Available Languages

Download Options

  • PDF     (4.0 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (81.4 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (65.7 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:November 6, 2026
Document ID:226516

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Contents

Issue

Organizations using Cisco Secure Access (CSA) must purge their existing user database when transitioning from one directory integration to another for user and group provisioning. This requirement occurs when switching directory sources (such as moving from one EntraID instance to another directory) and you must remove all previously provisioned users before establishing the new directory integration.

The initial assumption was a user database purge can only be performed through backend operations requiring Cisco support assistance. After careful investigation, it was revealed that users can perform this operation directly through the CSA dashboard interface.

Environment

  • Cisco Secure Access (CSA) tenant with existing user provisioning

  • EntraID directory integration currently configured

  • Requirement to transition to a different directory for user and group provisioning

Resolution

The user database purge in Cisco Secure Access can be accomplished by deleting the directory integration directly from the CSA dashboard. This action removes all users and groups that were provisioned through that specific directory integration.

Step 1: Access CSA Dashboard

Log into Cisco Secure Access dashboard for your organization.

Step 2: Navigate to Directory Integration Settings

Navigate to the directory integration configuration section within the CSA dashboard interface.

Step 3: Delete Directory Integration

Delete the existing directory integration from the dashboard. This action automatically removes all users and groups that were provisioned as part of that directory integration.

Step 4: Verification

After deleting the directory integration, verify the user database has been purged and users are no longer present in the CSA tenant.

Step 5: Configure New Directory Integration

Once the existing users have been removed, proceed to configure the new directory integration for user and group provisioning from the desired directory source.

Cause

The requirement to purge the user database arose from the need to transition from one directory integration to another for user and group provisioning. The initial misconception was that backend operations were required for this task, when the CSA dashboard provides native functionality to accomplish this through directory integration deletion.

Related Content

Revision History

Revision Publish Date Comments
2.0
06-Nov-2026
Updated title, spelling, grammar, spacing.
1.0
06-Nov-2026
Initial Release
TAC Authored

Contributed by Cisco Engineers

  • Cisco Engineers
    Cisco TAC Engineers

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products