Issue Summary

Changing external email address leads to an orphaned SCIM data

Steps to Reproduce

1. Setup SCIM provisioning
2. Create an external user and add the user to a provisioned group.
3. Verify that the user is added to the provisioned group in the Atlassian cloud site.
4. Change the email address of the external user to another email address in the identity provider

Expected Results

As expected, the account under the old external email address is removed from the provisioned group.

The org admins should be warned about the email address change limitation for external users and should have the option to push a new provisioned account under the new email address

Actual Results

As expected, the account under the old external email address is removed from the provisioned group.

The new external email address is updated on the SCIM user data but nothing gets propagated to the site.

Workaround

Please reach out to support to propagate the new account under the new email address.