in a MAD driver offset, assume a userA in eDir which is not yet entitled for a MAD account. he is, however, already member of groupB which is already synced to MAD. additionally there exists an (obviously unassociated) userobject userA in MAD.
Once the entitlement is granted a match takes place and the userA objects get associated, but in MAD userA is not listed as member of groupB until i issue a "synchronize" on the driver.
for new additions (without an existing counterpart in MAD) everything works without issues, i.e. existing group memberships get pushed from the vault immediately.
i'd assume this to be a result of the MAD "memberOf" attribute on a userobject being just a backlink, so it's likely to be expected, but...
...how to work around it?