User termination

How does everyone handle user termination?

We are cloud only, entra, all azure.. etc and I’ve spent the better part of the last few weeks writing powershell + azure automations + powerautomate flows to handle user termination including stripping user of all azure and entra active and eligible roles, revoke sessions, reset pw, wipe auth methods and all kinds of other shit on the way to finally disable.

Now, am I just an idiot? Shouldn’t this just happen when the account is disabled?

Is it a symptom of bad upstream practices? It just feels like a lot of work that should be a lot easier.