9. Troubleshooting Identity Providers (IdP), SSO, SAML, and SCIM Integrations

Issue	Troubleshooting instructions
What is the Frequency of sync from Azure AD to Exium?	Answer: Azure AD automatically runs a provisioning sync cycle every 40 minutes. You can easily check the provisioning status on the provisioning page, where details of both the previous and upcoming cycles are available.
Can I do manual sync of users from Azure AD to Exium?	Answer: Absolutely! If you prefer not to wait for Azure AD's automatic sync, you can initiate on-demand provisioning. Simply navigate to the Exium application on Azure AD, click 'Provision on demand,' and select the desired Group or User.
On Exium admin console, Can I delete users synced from IDP (Azure AD, Okta)?	Answer: No, it’s not possible to delete these users directly from the Exium Admin Console. In this case, the source of truth is the Identity Provider (IDP), such as Azure AD, Okta, or Jumpcloud, which enforces certain restrictions on deleting users from the Exium Admin Console. To delete these users, you’ll need to first detach them from the Exium app within the respective IDP.
On Exium admin console, Can I merge users synced from IDP (Azure AD, Okta) with other users?	Answer: No, it’s not possible to delete these users as these users are synced by he Identity Provider (IDP), such as Azure AD, Okta, or Jumpcloud, which enforces certain restrictions on deleting users from the Exium Admin Console. You can do vice versa of merging the user to users synced through IDP.
During Azure AD Sign-in, I am getting “Misconfigured Application” error with permissions for “AAD Graph”. How to resolve this?	Answer: This issue may occur if the Identifier and Reply URL were mistakenly swapped during the Azure AD Exium app SAML provisioning. Please refer to Section 2.3 of the Azure AD Integration document, reconfigure the settings correctly, and try again.