SSO decides who may sign in; SCIM decides who is a member. Without SCIM a leaver keeps the membership and the seat.
