I've been trying to track down at what interval does the identity provider perform a synchronization with Active Directory and can it be modified?  I'm using an AD group for managing licenses with rules setup for assigning a license.  We have a team that manages access and it would be preferable if they didn't have to access the LFDS to manually run a synchronization.  The add/removal would occur automatically when users are added to the AD group.