Manage Auto Provisioning

Under Security and Single Sign-on have ability to turn off auto creation of user accounts. We have an all staff group in azure but would prefer to be able to control access. We don't want anyone in the group who might login to aha to have an account created. We create accounts through the API. We now have to maintain an Azure group to control access via SSO so users can't create an account just by accessing Aha!