At the moment, provisioning in cloud requires different services to work together to sync the group membership data into a cloud site. As such the group membership changes on the IDP side may sometimes not take effect immediately on the Atlassian cloud site.

Suggestion:

• Provide a way to notify the end-users once the group membership changes have been applied on the cloud site. This is to indicate that the end-user has the proper license/permission to access data.
• Provide a way to notify admins when there is an issue/error with IDP SCIM provisioning
• Notify admins whenever accounts are provisioned or deactivated.