Automated Provisioning / Deprovisioning Using SSO

Summary:

My team recently set up TBE to use SSO (Azure) for login, but I'd like to take that a step further and use SSO to help me provision and de-provision user accounts. Has anyone here used Azure SSO to automate TBE user account activation/deactivation?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):