## Is your feature request related to a problem?

We manage around 20 3rd party tools that our internal users can log into using G Suite (part of your enterprise / scale offering). When a user leaves, we need to disable their account. Currently we need to do this in G Suite and then any of the 3rd party tools where password login is still possible.

## Describe the solution you'd like

When a user leaves, we disable their account in G Suite and their account in PostHog becomes disabled too. Essentially, the ability to restrict specific users in PostHog to only be able to login via SSO (defaulting to this setting).

## Describe alternatives you've considered

Manually removing their account, and being the enemy of our IT manager.

## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/authentication.py
def create(self, request: Request, *args: Any, **kwargs: Any) -> Response:
        """
            Method `create()` is overridden to send a more appropriate HTTP
            status code (as no object is actually created).
            """
        response = super().create(request, *args, **kwargs)
        response.status_code = getattr(self, "SUCCESS_STATUS_CODE", status.HTTP_200_OK)
        return response
class LoginViewSet(NonCreatingViewSetMixin, viewsets.GenericViewSet):
    queryset = User.objects.none()
    serializer_class = LoginSerializer
    permission_classes = (permissions.AllowAny,)
class PasswordResetSerializer(serializers.Serializer):
    email = serializers.EmailField(write_only=True)
    def create(self, validated_data):
        if getattr(settings, "SAML_ENFORCED", False):
            raise serializers.ValidationError(
                "Password reset is disabled because SAML login is enforced.", code="saml_enforced"
            )
        if not is_email_available():
            raise serializers.ValidationError(