What are the best practices?

1) Move the user to a disabled container in the IDVault and then have it
automatically disable.

or

2)Disable the user in the IDVault and have that move it to the disabled
container.

I will then follow Perin's suggestion of "At that point, you can
either look for Login Disabled changing to "true" in the other connected
system drivers and convert the modify into a delete for that system"

Thank you.