Issue Summary

Atlassian Accounts that should be managed become no longer appear as fully managed with no Org Admin intervention, despite the automatic claiming of new accounts setting on the email domain.

Update: The actual state of the accounts in the system responsible for maintaining the data is accurate, but the system that is used for representing the state in admin UIs has gotten out of sync.

Steps to Reproduce

Unable to reproduce

Expected Results

The managed account status should not be affected without Org Admin intervention.

Actual Results

For the account impacted :

1. Their managed account profile is not returned when searching for their email address in Managed Accounts, but their profile is accessible by manually building the URL:
   https://admin.atlassian.com/o/<Org_ID>/members/<Atlassian Account ID>
2. Org Admins can't assign an Authentication Policy.

Workaround

For the accounts that are provisioned, deleting their SCIM records by Atlassian Support or by using Deactivate a User instruction on User Provisioning API and re-provisioning the accounts solves the issue.