Provision and sync users from an identity provider