When performing a switch Master with the cluster nodes, or authorizations change in Active Directory or in the SaaS applications, you must refresh the authorizations in the PolicyMapping page.
To refresh authorizations from Active Directory, click the Refresh List icon in the upper right corner of the Identity Source panel.
To refresh authorizations from the SaaS applications, click the Refresh List icon in the upper right corner of the Authorizations panel.