Control user access to Google Apps Marketplace (non-google) services

[Nick]

I'm writing an app that is integrated Google Apps Marketplace using SSO.  I see that the administrator can turn off a access for a set of users.

http://support.google.com/a/bin/answer.py?hl=en&answer=182426

When access is turned off, the app doesn't show up in the universal navigation.  However, the user can still access the app and authenticate using openId for SSO.  So it doesn't really turn off access, just hides the links.

Is it possible to find of if an app is turned on or off for a given user? It looks like the Google Apps Provisioning API is the way to go.  Is this use case documented, or is there existing best practices for this use-case.

[Nick]

Looks like someone asked the same question two years ago.

https://www.youtube.com/watch?v=0L_dEOjhADQ&feature=player_detailpage#t=3798s