[EPIC] Inventory User Account Management

[SueValente]

This epic is to help facilitate the automated user account management settings needed for inventory.data.gov

@jbrown-xentity, @sanason and @jpyuda - Can you help refine this effort?
My goal is to have accounts auto lock after x amount of days (I'm not sure if that's 30, 60, or 90 days but whatever the security standard is)
I'd like to use a similar lockout to Touchpoints so that we don't have to manage it manually and can drop the arduous manual process.

Do we have to do other things? Are there other steps?

[jbrown-xentity]

Should link in @FuhuXia to the conversation, as he is probably most familiar.

I believe we could do some type of daily github action that would review all users, email any that haven't logged in between 80 and 90 days (daily email), and remove user from all orgs (essentially lock them out) after 90 days. However I think saving/storing what actions that job performed would be important; it would be helpful to have some type of audit trail of what organization(s) the user was a part of if they request access again.

We could also fully remove users from the system after a period of time (say 180 days, double the lock time, or even a full year). Typically we haven't removed users too often because of the high overhead for adding users, but I think it's been a few years since anyone has actively removed anyone and there's probably some dead accounts hanging around.

There's also #6104, which may make some of this optimization obsolete (see current proposal). However given that will take months, I'm ambivalent about whether to do this or not.