Yes, user access can be configured with an automatic expiry date. After that expiry date the user is automatically blocked from logging in.