
u4nhe (u4nhe) asked a question.
Hi support,
We've followed the manual for Configuring Provisioning for Slack, but unfortunately, we are not able to set this up.
Our goal is to automatically de-provisioning users once they are removed from the security groups.
Do we miss functionalities and could you help us with this?
Please let us know!
Kind regards,
Matys Welle
Manual: https://saml-doc.okta.com/Provisioning_Docs/Slack_Provisioning.html

Some of what you are seeing is by-design. LCM is more about the Deactivation of a User up in an App, and less about what happens when they are removed from a Group. (ie "User is deactivated in Okta, and also Deactivated as a result in any provisioning-supported App they were assigned." Most apps simply leave the User up in the app, but simply mark them Inactive (the idea there is Reactivation later on).
Lots of things in play, including making sure you have the Plus edition/subscription of Slack; Using Group Push, the below caveat which otherwise makes Group Push goodness not happen:
Also this
Also quite common is for those Inactive users left up in the app, to have a bulk-delete/cleanup operation available that is run on the app's backend, but this varies by SP.
Finally, something most forget:
Group Push does not create Users in the app-- it only creates a Group in the App w the same name as the Group in Okta, and then populates it with List of Members (Names).
(This is probably the reason for the Group-Push Caveat above)
This almost sounds like a job for a Workflow (but can't tell where you want the User De-Provisioned: is it only up in the App? or in Okta as well?
If it's also in Okta, Workflow might do it.