After updating user directory attribute, Last Authenticated Time, and AD users are removed from internal groups

Copied from: https://jira.atlassian.com/browse/BSERV-11085

Steps to reproduce

1. Add user directory, and in the User Schema Settings, set the  Unique ID Attribute to UserPrincipalName
2. Add users from an AD to an internal group
3. Login with the user from AD to get Last Authenticated time and logout
4. Login as admin and edit the user directory setting, and from the User Schema Settings, change the Unique ID Attribute to objectGUID
5. Save and sync

Expected result

Synchronization is successful, the users Last Authenticated Time is preserved, and the users in internal groups are preserved.

Actual result

Synchronization is successful, however, the users Last Authenticated Time is unknown, AD users are removed from the internal groups