A cloud administrator is integrating a third-party identity provider (IdP) with Webex to automatically provision and deprovision users. The organization does not run Active Directory on-premises and wants a real-time, standards-based approach that pushes user create, update, and delete operations directly to Control Hub without deploying any on-prem software. Which provisioning method should the administrator implement?