## Is your feature request related to a problem?

We manage around 20 3rd party tools that our internal users can log into using G Suite (part of your enterprise / scale offering). When a user leaves, we need to disable their account. Currently we need to do this in G Suite and then any of the 3rd party tools where password login is still possible.

## Describe the solution you'd like

When a user leaves, we disable their account in G Suite and their account in PostHog becomes disabled too. Essentially, the ability to restrict specific users in PostHog to only be able to login via SSO (defaulting to this setting).

## Describe alternatives you've considered

Manually removing their account, and being the enemy of our IT manager.

## Additional context



#### *Thank you* for your feature request – we love each and every one!

ee/api/test/test_authentication.py
import copy
import os
import uuid
from typing import Dict, cast
import pytest
from django.conf import settings
from django.core.exceptions import ValidationError
from freezegun.api import freeze_time
from rest_framework import status
from social_core.exceptions import AuthFailed
from ee.api.test.base import APILicensedTest
from posthog.models import Organization, OrganizationMembership, Team, User
MOCK_SETTINGS = {
    "SOCIAL_AUTH_SAML_SP_ENTITY_ID": "http://localhost:8000",
    "SAML_CONFIGURED": True,
    "AUTHENTICATION_BACKENDS": settings.AUTHENTICATION_BACKENDS + ["social_core.backends.saml.SAMLAuth",],
    "SOCIAL_AUTH_SAML_ENABLED_IDPS": {
        "posthog_custom": {
            "entity_id": "http://www.okta.com/exk1ijlhixJxpyEBZ5d7",
            "url": "https://idp.hogflix.io/saml",
            "x509cert": """MIIDqDCCApCgAwIBAgIGAXtoc3o9MA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG
    A1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEU