I have Office 365 set with Profile Sync provisioning. The following are checked: Create Users, Update User Attributes, and Deactivate Users. I assigned the app to a test account in Okta, and provisioning worked. I then removed the assignment to test deprovisioning, and it set the O365 account to "sign-in blocked", however it still retains the license. I read here: https://help.okta.com/en/prod/Content/Topics/Apps/Apps_Moving_Microsoft.htm that a 3-day grace period is a best practice and that's fine, however it's not clear whether Profile Sync has a fixed grace period, and if so, how long is it?