Hi @geekflyer,
I'm happy to announce that our latest version of the SCIM bridge does include a sync button that you can click on demand. Feel free to upgrade using whichever deployment method you originally chose.
As for the other limitations you've noted, these are mostly by design. We only subscribe to events triggered by admin users using the Google admin report API (which is part of the scope permissions you give us during the initial setup). We can look into triggering these notifications through other means if the demand is high enough, but considering that the desired state can be reached by running a sync that's the solution we will recommend for now.
When it comes to direct / indirect group memberships, this is intentional. We have no concept of nested groups in 1Password, so we opted to flatten out the group memberships and require a direct sync. If you have a group of a group that you would like synced, you just have to check both groups in the UI instead of only the parent one.
Thanks a ton for your feedback, and we hope to see you again soon!
