Set user as external based on SAML attribute

When a user account is created using SAML I'd like for the user to be correctly set as external based on some information returned by SAML. Even better would be to automatically update their user type on each sign in (e.g. external employee became internal employee, SAML indicated and GitLab unchecked "external").