SSO - Deprovisioning users

[alexppg]

Hello there!
I've been using Vaultwarden with Bitwarden Directory Connector for a while, and I've just realized that is not possible to automatically deprovision users.
Is this contemplated with the new implementation of SSO?
PD: thanks for all your work, vaultwarden is awesome \o/

[Timshel]

Hey,
I'm still working on merging additional features, I plan to try to merge all the features from Timshel/OIDCWarden#features.

As for deprovisioning users, removing them from Organization or Groups is supported but not deleting the account.

With the current features the closest you could get to is to block access using SSO_ONLY activating roles (SSO_ROLES_ENABLED) and disabling SSO_ROLES_DEFAULT_TO_USER which mean that removing the user role would then lock them out.