Minor adjustments were necessary to support Okta SCIM payloads.
The SCIM spec gives enough leeway that providers can differ slightly
in the payload format. These changes allow us to be compatible with
Azure and Okta, but probably additional providers as well.