We have a SCIM integration that’s integrated with Okta. One of our users has found that when they remove users from the application in Okta, that change isn’t propagated to our SCIM API.
They’ve sent through their Okta logs, and I can see that the successful removals have a pair of application.user_membership.remove / application.provision.user.deactivate events. However, the unsuccessful removals have application.user_membership.remove, but no corresponding application.provision.user.deactivate, and never appear to hit our SCIM endpoint.
Can anyone confirm that application.user_membership.remove doesn’t trigger a SCIM call, or know in what circumstances a remove event would be generated without a deactivate event?