This issue Dan notes below is an issue for us as well. As I'm moving users from the ProofHQ account assignment to a higher level, non-External account, I'm not able to update their Federation IDs and its causing delays in our ability to efficiently transtion users to their new roles.