Google Workspace SCIM bridge not syncing group members when email address case differs

I might have a similar, but different problem (see https://1password.community/discussion/133801/google-workspace-scim-integration-sync-not-working-after-intial-sync#latest ). For me the initial sync is working but no sync afterwards when the google group has changed. Haven't seen a difference in email casing. I wonder if you managed to test out the behaviour when you add or remove a member from Google group? Does this successfully trigger a sync and how long is the delay? For us this doesn't seem to be working at all.

@geekflyer I'll follow up with specifics in your thread, but I don't think this is the same issue.

I'm currently working on some tests renaming one such user in GW to something temporary, then renaming them back (with correct capitalization). I will report back on whether that solves the issue. Is there a way to force that rename only on the 1Password site?

Hello @timchambers ,

Thank you for the question.
Happy to know you are able to setup SCIM integration with Google Workspace.

With reference to your question for differing email addresses I would like to ask if those users are manually invited to 1Password or provisioned by SCIM ?
We are unable to reproduce this particular scenario because email addresses are forced to be lowercase on Google Workspace.
Also it will be great if you can download logs from SCIM Ui and attach here for further diagnosis.
Any information on how you set up 1Password or how you encountered this issue will be helpful.

@hemal_g_1p I've confirmed that the users were manually invited to 1Password with a capitalized email address (my hunch is that this was done on a mobile device and your input field allows autocorrect to capitalize things?)

I'll see if I can post some logs for you. Is there a particular event you're wanting to see in the logs? If so I can try and recreate it and capture that set of logs.

In the mean time, is there a way to trigger a user email change directly in 1Password? I know that the SCIM can trigger a email change when the email is changed in Google Workspace, but rather than going through the trouble of doing that multiple times for each user, if I could do so via the 1P API or the SCIM API, that would be simpler on our users.

Hey @timchambers,

Thanks for reaching out and bringing this up. I was able to reproduce the issue and its now something on our radar to fix, as we should be treating emails as case insensitive. No need to provide us with logs since we have seen the issue reproduced ourselves. Unfortunately our email change process is case-insensitive, so our server won't propose the new email change to your users if the only change is a case change. The issue is very clear, and especially since we don't have any workarounds for you, we're adding this up next to fix. I'm sorry we don't have an immediate solution for you. You can expect this to be included in our next patch release, 2.6.1. We're hoping to have this released in 1-2 weeks, with our downstream apps updated in 2-3 weeks. Please reach out to us if you have any additional questions.

@Chas_1P Thanks for the update, glad you've got it identified. I look forward to the fix. Will the resolution take care of renaming our 1Password users, or just ignore case when syncing users/groups?

@timchambers This patch will simply ignore case differences in your user's emails, so that syncing will work as intended.

@Chas_1P Got it, thanks.