Problem Definition

Sometimes, but still rarely, groups that are provisioned from an IDP take time to be fully synced to the sites within the organization, even though the groups are synced to the user provisioning directory.

Suggested Solution

If the number of groups and the group membership is under a specific threshold, guarantee an upper limit for how long the group synchronization from the user provisioning directory to the sites/organization will take.

Why this is important

This delay represents a temporary inconsistency between the IDP and the Atlassian sites which can impact permissions and product access for that period of time. This can also provide the impression that user and group provisioning are not functioning properly.