What is the nature and description of the request?

It is possible to deny a user access to AAP via SSO and mapping. 

ref: https://access.redhat.com/solutions/7129439

However, a user account is still created, even though they were unable to log in.

Why does the customer need this? (List the business requirements here)

To maintain an accurate list of users who use AAP.

How would you like to achieve this? (List the functional requirements here)

Do not create a user account until after the mapping has been checked

List any affected known dependencies: Doc, UI etc..

Github Link if any