AD-to-Okta sync restores stale group memberships for deprovisioned/rehired user despite full import and user deletion

Hello, I have the next issue:

User was deprovisioned (fired), group memberships frozen

On reimport (rehire), Okta restores old group memberships regardless of current AD state

Even full delete + reimport as new user doesn't clear them

AD confirms he's NOT a member of those extra groups

Could you please assist?

Basically OKTA user has more groups that the user has in AD, and full import or recreating user doesn't help. Feel like OKTA pulls cached data from AD, but I tried restarting OKTA AD Agent as well, no luck.

Thanks in advance!