Zabbix 7.0.19, insalled on rocky linux 8

I have configured and enabled JIT provisioning.

Provisioning period is set to: 1h

But no users from specified mapped AD group will be automatically provisioned to zabbix.

I need to type in AD username and password on login window - only then the AD user will be povisioned to zabbix.

And also, if I remove the AD user from AD group - then also nothing is happening within this period of 1h. I removed the user from AD group yesterday and checked the next morning - the user still had zabbix group mapped.

Then when I try to login with that AD user, only then it will deprovision the user and add it  to "Disabled" group and the login will not work.

But is this how it should work ?

I mean what is the purpose of the "Provisioning period" in "LDAP settings" page then ?

At the moment I see that provisioning and deprovisioning only happens when the user actually tries to log in.