Hi there,
If a synced directory user account is disabled in Azure or Active Directory, the user will be disabled in Duo automatically when the next directory sync occurs. This is by design and I suppose you cannot automate this
--If the reply is helpful, please Upvote and Accept as answer--