Sync the full set of SSO users. The organization must have SSO configured. The server computes a delta — new users are provisioned, existing ones are updated, and any user not included is deprovisioned (along with their employee bindings). This operation is synchronous.

Requires scope: user:sync.