An organization owner manages a 200-person GitHub organization that is connected to the company's identity provider (IdP). She wants team membership on GitHub to automatically reflect group membership in the IdP, so that when HR removes someone from a group, that person is also removed from the corresponding GitHub team without any manual action. Which GitHub feature should she configure to achieve this?