Allow identity providers (IDPs) to proactively provision and deprovision users based on predefined role mappings. This will ensure new users have access and and retired users are promply removed.