SCIM provisioned users disapearing and/or group membership not updated

Hello,

With a Hub business account configured with EntraID SSO, SCIM, and Encryption service, we are seeing autoprovisioned users disapearing in Hub and/or their group membership not updating on the Hub side.

On the Entra side, the provisioning logs show failures saying 'failed to update user', and on the Hub side seeing 'user disabled by organization syncronizer'.

The issue seems to occur for SSO users who have not been sent an invitation email, which shouldnt be necessary with the Encryption service in place. Also appears to happen if a user is created in Hub initially, and then updated/matched via the SCIM syncronizer.

Are you able to check any logs on the Hub side to see what is going on?

Please let me know if you would like any additional info.

Thanks
Joe