-
Suggestion
-
Resolution: Unresolved
-
None
-
7
-
If we remove a SCIM synced user by clicking "Remove user" on the User details page (https://admin.atlassian.com/o/ORG-ID/users/AAID), they will be removed from the synced groups they are part of in Atlassian. However, IEDA will still have the group information (it is not touched), causing the IDP (Azure in this case) to skip the user due to a RedundantExport. Hence, the user group is not getting synced again.
To avoid this issue, it would be best to disable the "Remove user" button on the Users page UI for SCIM-synced users.
Workaround
Re-invite the user in the site or org's Users administration
Remove and re-add the user to the provisioned groups in the Identity Provider to trigger a new sync for the user.
For Atlassian Support:
Re-sync the user and then re-sync the missing groups using the IEDA Maintenance API.