When an employee leaves a company with a Discourse setup that only allows SSO to a corporate infrastructure, the recommended course of action is debated. Philip_Colmer considers deactivating, suspending, deleting, or anonymizing the account, but wants to preserve the user’s posts.
pfaffman suggests doing nothing, as SSO will prevent the user from logging in, and instead adding them to a “former employee” or “alumni” group with a badge. sam agrees, but recommends also killing off existing sessions by clicking “Log Off” on the admin user page and adding a title “former employee.” If the departure was on bad terms, sam suggests suspending the user forever.
Mittineague clarifies the “Log Off” process, and Philip_Colmer confirms it refers to a button on the user page. mcwumbly shares an alternative approach, letting email bounces automatically deactivate the account.
I don’t want to delete the account because that would delete the corresponding posts? I don’t want to anonymise the account because that would lose the information as to who posted in the first place.
I could suspend but it looks like I would need to increase the suspend timeout.
