When VMware Cloud Foundation (VCF) Single-Sign On (SSO) is configured with the Active Directory over LDAP Identity Provider, VCF Operations will periodically synchronize the users and groups from your identity source.
By default, the sync frequency will default to once per week but it is user configurable to daily, hourly and even down to every 15 minutes, which is the lowest configurable frequency that is supported as shown in the screenshot below.

For users that require a one time sync, VCF Operation does provide a manual sync function that you can invoke under the configured identity source as demonstrated in the screenshot below.

Since the automated sync frequency ca not go below 15 minutes, the manual sync can be a viable workaround. If you need automate and schedule the manual sync, you may want automate it instead of manually invoking the function in the VCF Operations UI ...