The answer to this is SCIM, which allows an app to sync the user state with the identity/directory system. IT admins call this "User Lifecycle Management" and

The answer to this is SCIM, which allows an app to sync the user state with the identity/directory system. IT admins call this "User Lifecycle Management" and it's typically a required feature for enterprise-scale customers. (I work at WorkOS and we help developers with this: https://workos.com/directory-sync https://workos.com/directory-sync)