The organization identity should not depend on one employee. An Organization UIID represents the company or legal entity, not the person who originally created or administered it.
Prepare before someone leaves. Review who can access the organization identity, which recovery methods are available, which applications have been authorized and which AI agents act under the organization’s authority. Make sure the recovery material is accessible to the organization rather than stored only on the employee’s device or personal account.
Do not create a replacement organization identity as the first response. A new identity can separate the organization from existing application registrations, badges, permissions and integrations. Recover and secure the existing identity wherever possible.
Review connected applications and agents. Revoke anything created for the departing employee’s work that is no longer required. Agent permissions are revocable at any time and should be treated as active organizational access.
Re-enrol the identity on an approved device. Biometric credentials are tied to individual devices, while the Core ID and its aliases are not. Sign in through an available recovery route and enrol the replacement device.
If the departing employee was the only person with access, contact support immediately. Write to [email protected] and explain that the request concerns an Organization UIID and a change of administrator. Do not send a .uiid file, backup code or other credential by email.