• Single logout (SLO) is not supported.
  • User attributes cannot be cleared after they are set.
  • Because of API limitations, a user’s email cannot be updated until the user has activated their account.
  • Because of API limitations, a user cannot suspend or un-suspend until the user has activated their account.
  • Because of API limitations, if a user’s given name or surname fails to update due to the new value containing unsupported characters (*|:"<>?), an error might not be reported in the provisioning logs.
  • Because of API limitations, a user cannot be added to a group until the user has activated their account.
  • The externalId attribute is not supported for group provisioning