Is Ably able to provision users and groups from an identity provider

Yes, the organizations feature supports provisioning users via SCIM.

Note: An Enterprise account is required to use organizations. Contact us to enable organizations for your account.