Auto Deselect to show in User Pickers when user has no access or is on the Deny List.

With some kind of API - no, I've never seen that setting outside of the interface. Can you just removed the denied users from the app? You could have a Pipeline that queries all the users in the app and if they're denied simply remove them from the app entirely.