When a user connected by LDAP is removed from LDAP, the cwd_user record is removed, but the corresponding cwd_membership record will remain as an orphaned record.

Steps to reproduce

1. Link Crowd to an LDAP Directory
2. Synchronize so a user (with a group membership) is added to Crowd
3. Search the database for the user in the cwd_user table and cwd_membership table (should exist in both)
4. Remove the user from the LDAP
5. Synchronize with Crowd
6. Search the database for the user in the cwd_user table and cwd_membership table

Expected Result

User is removed from both tables

Actual Result

The user record will exist in cwd_membership but not in cwd_user

Other Information

This can create an issue in a database audit situation where records do not match across tables