Access users not migrating from local

[Mat Kilby]

We have set up Atlassian access for our org.  All users are in the group that we have synced from Azure AD. 

Most have come across cleanly from previous local accounts. I have a couple of users who I have moved from the old local policy to the new policy. But they still cannot login with SSO, and despite not being in the old policy group still can log on against the old policy.

Also, I have no buttons to remove the old policy as referenced here https://support.atlassian.com/security-and-access-policies/docs/understand-authentication-policies/