Has anyone used OIC to orchestrate deactivation for non "white list users" for development PODS

Summary:

Currently we manage several PODS, once we have had a pod refreshed (p2t) we have several activates that the team conduct as part of this post clone step activity. One of which is to deactivate all users minus circa 100 that are recorded on an agreed access 'white list'. Our current user base is 60,000.

Content (required):

Currently we mass load to de-activate users not listed on the white list. However this can be timely so wanted to understand if others have used OIC to run this in the past automatically as the 'white list' is pretty static.

Would be interested to hear how others handle this situation and or any recommendations to further improve this process so we can enhance it.