The article describes an action plan to follow when dynamic VPN users are not getting cleared automatically on SRX devices. 

Dynamic user mapping does not clear if VPN is disconnected or even when we manually clear the user.

To investigate the issue take general authentication traceoptions

> set system processes general-authentication-service traceoptions file AuthTrace size 20m files 10

> set system processes general-authentication-service traceoptions flag all

And if no relevant info is available on traces take a core-dump of the process ( contact JTAC for the same )

As a workaround we can try restarting "general-authentication-service"

> restart general-authentication-service

If issue still persist, Please contact JTAC for further assistance.