What happens to the user's vault when they are removed from or deleted from the idP?
Keeper will never automatically delete a vault. The user's vault will go into a locked status, preserving all data. An admin can delete the vault, or transfer the contents to another vault (if transfer account policy was enabled and accepted).