Provisioning / decomissioning guest accounts

[5280Quality]

HI - We currently use Salesforce(SF) to manage customer accounts/activities.  If we add a customers employee (SF Contact) to an MSTeams site where we are doing deeper collaboration; there does not appear to be a way to make sure its reconciled with an active user record in Salesforce.  For instance if we were working with a customers employee on a wiki and that employee leaves their company we want to be able to turn off access to the MSTeams site;  Has anyone done this?

[#2]

First question that comes to my mind is the following: Do you have SSO enabled between Microsoft 365 and Salesforce? With SSO enabled, I'm not sure if the scenario you have here is applicable anymore

[#3]

@Juan Carlos González Martínmy IT Group says Microsoft does not support third party SSO for guest identity management. Is that true?  They have a SSO App in between salesforce and our other apps that supports OpenId Connect, OAuth2, or SAML.  Is there a tech brief I can point them to that describest how to achieve what I want to do?

[#4]

Sure,
Here you go: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/salesforce-tutorial