Org sync is configured deployment wide, however for the terraform provider, it might be nice to configure it the org block.

resource "coderd_organization" "engineering" {
  // ...
  idp_groups = ["developers"]
}

Unsure how ergonomic this is, just want to consider a different model than the ui is designed.

Requires: coder/coder#15939

Will require us to implement coder/coder#15939 first. Also this will require the provider to built with a newer version of Coder meaning older releases of our provider will not be able to access these new API endpoints. Maybe we can add a failure if we detect a version mismatch & update our docs.