with JIT user/group provisioning can we force refresh on group membership for users that already exist?

currently we do not, we can add a feature request to support this, though