Automating MFA Token Invalidation Upon User Account Disablement

We are looking for a way to automatically invalidate a user's MFA token as soon as their account is disabled. Currently, the leaver process flows from our IAM solution to on-prem AD, which then syncs...