We would like to be able to automatically mark a user on Box as inactive. Also, would like to see a report on which users were de-provisioned from the Active Directory when SSO is enabled.

One example would be the below:

I'll give you an example - we have integrated our AD with Adobe, so that when a user is disabled in AD, their Adobe product licenses are also automatically removed and therefore available to use for the new users. We add users to security groups in AD to assign the licenses. When the Adobe connector pulls the user data from AD and some of them are disabled, the licenses automatically get stripped out. Very convenient.