-
Suggestion
-
Resolution: Unresolved
-
None
-
4
-
If we remove a SCIM synced user by clicking "Remove user" on the User details page (https://admin.atlassian.com/o/ORG-ID/users/AAID), they will be removed from the synced groups they are part of in Atlassian. However, IEDA will still have the group information (it is not touched), causing the IDP (Azure in this case) to skip the user due to a RedundantExport. Hence, the user group is not getting synced again.
To avoid this issue, it would be best to disable the "Remove user" button on the Users page UI for SCIM-synced users.
Workaround
We can manually re-sync the group using the IEDA Maintenance API, which should then re-sync the user to the groups.