When a user is deleted from an IdP application in Treasure Data, the account owner or an administrator must also remove the user from the TD Console. Otherwise, the user can log into Treasure Data for the length of their current login session.
Refer to Specifying Session Timeout.