Workfront currently supports JIT provisioning, which is great! One thing that would be amazing to see next is to support deprovisioning that is driven from the IDP. This way we wouldn't need to do an audit/clean up within Workfront in addition to deactivation of the user in the IDP.
