## Is your feature request related to a problem?

We manage around 20 3rd party tools that our internal users can log into using G Suite (part of your enterprise / scale offering). When a user leaves, we need to disable their account. Currently we need to do this in G Suite and then any of the 3rd party tools where password login is still possible.

## Describe the solution you'd like

When a user leaves, we disable their account in G Suite and their account in PostHog becomes disabled too. Essentially, the ability to restrict specific users in PostHog to only be able to login via SSO (defaulting to this setting).

## Describe alternatives you've considered

Manually removing their account, and being the enemy of our IT manager.

## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/test/test_authentication.py
with self.settings(
            CELERY_TASK_ALWAYS_EAGER=True, SITE_URL="https://my.posthog.net",
        ):
            response = self.client.post("/api/reset/", {"email": "i_dont_exist@posthog.com"})
        self.assertEqual(response.status_code, status.HTTP_204_NO_CONTENT)
        # No emai
        self.assertEqual(len(mail.outbox), 0)
    @pytest.mark.ee
    def test_cant_reset_with_saml_enforced(self):
        with self.settings(
            CELERY_TASK_ALWAYS_EAGER=True,
            EMAIL_HOST="localhost",
            SITE_URL="https://my.posthog.net",
            SAML_ENTITY_ID="entityID",
            SAML_ACS_URL="https://saml.posthog.com",
            SAML_X509_CERT="certificate",
            SAML_ENFORCED=True,
        ):
            response = self.client.post("/api/reset/", {"email": "i_dont_exist@posthog.com"})
        self.assertEqual(response.status_code, status.HTTP_400_BAD_REQUEST)
        self.assertEqual(
            response.json(),
            {
                "type": "validation_error",
                "code": "saml_enforced",
                "detail": "Password reset is disabled because SAML login is enforced.",
                "attr": None,
            },
        )
    def test_cant_reset_if_email_is_not_configured(self):