...

First, we must validate the scenario in the attached PowerPoint file eduTEAMS_Overview.pptx, The file also contains questions I was asking myself while drawing and trying to attach my resource to eduTEAMS.

Enrollment

Account provisioning / deprovisionning

As we are in an highly heterogeneous distributed system, enrollment events might be pushed to certain resources to provision an account, a profile, etc. But if we need provision, we also need to deprovision. Many can deal with provisioning on the fly, but I have not heard of the reverse yet. So do we have something ? How do we tell that a new person, or group is added ?  How do we tell that a person, or a group have been removed ? The most scalable and agnostic structure could be an event hub, where SP, resources can subscribe which mean a tool and an API.