Keybase Teams - LDAP (automatically remove team members for security)

Allow Keybase Teams to connect to LDAP and/or other authentication services.

It's easy enough to add users to a team when someone realizes they don't have access and they need it; however, it's really hard (or harder) to remember to remove someone from a team when they leave the company. It's easy to forget and then users who leave (or are forced to leave) the company then still have access to company secrets.

The issue names no files, tests, or entry points. Start by clarifying the supported LDAP or authentication-service integrations, membership-removal rules, and security requirements; done would require an agreed scope and tests covering automatic removal of departing users.

Written by the indexing model from the issue text.