Optimize SCIM for bigger user bases
We currently have a rather simple-minded provisioning process, where all users are provisioned in all apps -- that they have access to. If there are many users, this can be a slow process and it does a lot of unnecessary work, re-provisioning unchanged users over and over again.
We should refine the provisioning requests, so we can make just the necessary changes in case of changes to a user. We would still run the full provisioning loop from time to time to detect and fix drift, but that can be as infrequently as once a day or so.