Wipe corporate data from apps/devices when AAD user object is disabled
Currently there exists no built-in automated cleanup of corporate data from registered apps and/or devices when a user is terminated and their AAD user object is disabled.
It is possible to leverage the Graph API via Powershell scripting to automate some of this.
It would be great if it were possible to enable built in automation of this process. Ideally the call to wipe corporate data from apps and devices along with removing the devices from Intune would take place once the account disable has taken place.