The Ping Identity Directory Server provides support for soft delete operations, in which an entry can be hidden rather than completely removed. I wrote about this on my personal blog at https://nawilson.com/2019/02/27/soft-deletes-in-the-ping-identity-directory-server/.