SSO, self-service
Your administrator configures an identity provider from a preset, publishes an SSO application, and turns on SCIM to provision users in and out.
It is your directory and your decision; we are the front door, not the gatekeeper of your own change requests.