Time-based Okta group membership

This story automatically removes users from Okta groups at a predefined time. The story can handle multiple groups with different time limits.