## Is your feature request related to a problem?

We manage around 20 3rd party tools that our internal users can log into using G Suite (part of your enterprise / scale offering). When a user leaves, we need to disable their account. Currently we need to do this in G Suite and then any of the 3rd party tools where password login is still possible.

## Describe the solution you'd like

When a user leaves, we disable their account in G Suite and their account in PostHog becomes disabled too. Essentially, the ability to restrict specific users in PostHog to only be able to login via SSO (defaulting to this setting).

## Describe alternatives you've considered

Manually removing their account, and being the enemy of our IT manager.

## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/test/test_signup.py
Organization.objects.create(name="Test org")
        from ee.models.license import License, LicenseManager
        super(LicenseManager, cast(LicenseManager, License.objects)).create(
            key="key_123", plan="enterprise", valid_until=timezone.datetime(2038, 1, 19, 3, 14, 7), max_users=3,
        )
        response = self.client.get(reverse("social:begin", kwargs={"backend": "gitlab"}))
        self.assertEqual(response.status_code, status.HTTP_302_FOUND)
        url = reverse("social:complete", kwargs={"backend": "gitlab"})
        url += f"?code=2&state={response.client.session['gitlab_state']}"
        mock_request.return_value.json.return_value = MOCK_GITLAB_SSO_RESPONSE
        with self.settings(MULTI_ORG_ENABLED=True):
            response = self.client.get(url, follow=True)
        self.assertEqual(response.status_code, status.HTTP_200_OK)  
        self.assertRedirects(response, "/signup/finish/")  
    @mock.patch("social_core.backends.base.BaseAuth.request")
    @pytest.mark.ee
    @pytest.mark.skip_on_multitenancy
    def test_api_cannot_use_social_login_to_create_organization_if_disabled(self, mock_request):