## Is your feature request related to a problem?

We manage around 20 3rd party tools that our internal users can log into using G Suite (part of your enterprise / scale offering). When a user leaves, we need to disable their account. Currently we need to do this in G Suite and then any of the 3rd party tools where password login is still possible.

## Describe the solution you'd like

When a user leaves, we disable their account in G Suite and their account in PostHog becomes disabled too. Essentially, the ability to restrict specific users in PostHog to only be able to login via SSO (defaulting to this setting).

## Describe alternatives you've considered

Manually removing their account, and being the enemy of our IT manager.

## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/test/test_authentication.py
with self.settings(
            CELERY_TASK_ALWAYS_EAGER=True, SITE_URL="https://my.posthog.net",
        ):
            response = self.client.post("/api/reset/", {"email": self.CONFIG_EMAIL})
        self.assertEqual(response.status_code, status.HTTP_204_NO_CONTENT)
        self.assertEqual(response.content.decode(), "")
        self.assertSetEqual({",".join(outmail.to) for outmail in mail.outbox}, set([self.CONFIG_EMAIL]))
        self.assertEqual(
            mail.outbox[0].subject, "Reset your PostHog password",
        )
        self.assertEqual(
            mail.outbox[0].body, "",
        )  # no plai
        html_message = mail.outbox[0].alternatives[0][0]  # type: i
        self.validate_basic_html(
            html_message, "https://my.posthog.net", preheader="Please follow the link inside to reset your password.",
        )
        # validat
        link_index = html_message.find("https://my.posthog.net/reset")
        reset_link = html_message[link_index : html_message.find('"', link_index)]
        self.assertTrue(
            default_token_generator.check_token(
                self.user, reset_link.replace("https://my.posthog.net/reset/", "").replace(f"{self.user.uuid}/", "")
            )
        )
    @override_config(EMAIL_HOST="localhost")
    def test_reset_with_sso_available(self):