Offboarding
Removing every piece of access a departing person holds, on the day they leave.
A complete offboarding covers far more than disabling the account: revoking active sessions and tokens, removing them from applications that authenticate separately, collecting devices, reassigning ownership of files and shared mailboxes, and rotating any shared credentials they knew.
The gap that bites most often is the application outside single sign-on. Without a maintained inventory, access to those services can persist for months after someone has gone.
Where this comes up
Offboarding sits inside our identity and access work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.