In CONF-22463, we introduced an action to migrate external memberships for users who need to use a delegated LDAP directory.

However, the migration only occurs if the user found in EXTERNAL_ENTITIES is a member of an internal group. In some cases, the external entity is not part of an internal group (the users are managed entirely via an LDAP group). With this configuration is it not possible to migrate these users at all.