If User Federation's "Edit Mode" is "WRITABLE", 
when an admin makes an RH-SSO account disabled, the corresponding AD account becomes disabled.
Then, the admin make the AD account enabled again from AD side, the RH-SSO account left disabled even when the "Synchronize all users" is executed.

Expectation is "Edit Mode"=WRITABLE syncs RH-SSO user storage and LDAP server, but this behavior is annoying.

This is about backport to RH-SSO once the corresponding issue is fixed in upstream