Recently I have noticed that new user profiles are being created with a flag that states "User is read-only". We have an SSO and map users to specific groups using the mini Orange macro. Previously, we would only see this flag when a user was incorrectly removed from our active directory, however now new users are receiving the flag. Any ideas?