Collecting the laptop and badge at offboarding is far from enough. This guide explains which access rights must be revoked, why traditional methods always leave gaps, and how unified identity plus zero trust cuts off all remote access the same day an employee leaves.