Suspend without negative punishment

Unfortunately the SSO option is out of the door as it won’t be a viable solution (for the company at least). Changing groups isn’t useful either as it’s wayyy too difficult to afterwards re-instate those groups.

Thank you for your help though.