## Is your feature request related to a problem?

We manage around 20 3rd party tools that our internal users can log into using G Suite (part of your enterprise / scale offering). When a user leaves, we need to disable their account. Currently we need to do this in G Suite and then any of the 3rd party tools where password login is still possible.

## Describe the solution you'd like

When a user leaves, we disable their account in G Suite and their account in PostHog becomes disabled too. Essentially, the ability to restrict specific users in PostHog to only be able to login via SSO (defaulting to this setting).

## Describe alternatives you've considered

Manually removing their account, and being the enemy of our IT manager.

## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/test/test_authentication.py
token = default_token_generator.make_token(self.user)
        response = self.client.post(f"/api/reset/{uuid.uuid4()}/", {"token": token, "password": "a12345678"})
        self.assertEqual(response.status_code, status.HTTP_400_BAD_REQUEST)
        self.assertEqual(
            response.json(),
            {
                "type": "validation_error",
                "code": "invalid_token",
                "detail": "This reset token is invalid or has expired.",
                "attr": "token",
            },
        )
        # user re
        response = self.client.get("/api/users/@me/")
        self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
        # passwor
        self.user.refresh_from_db()
        self.assertTrue(self.user.check_password(self.CONFIG_PASSWORD))  # type: i
        self.assertFalse(self.user.check_password("a12345678"))
    def test_e2e_test_special_handlers(self):
        with self.settings(E2E_TESTING=True):
            response = self.client.get("/api/reset/e2e_test_user/?token=e2e_test_token")
        self.assertEqual(response.status_code, status.HTTP_204_NO_CONTENT)
        with self.settings(E2E_TESTING=True):
            response = self.client.post(
                "/api/reset/e2e_test_user/", {"token": "e2e_test_token", "password": "a12345678"}
            )
        self.assertEqual(response.status_code, status.HTTP_204_NO_CONTENT)