In the case that the user metadata exists in the Cloud_Controller but is missing in UAA, this issue has been fixed for PAS versions 2.2.12, 2.3.7, and 2.4.3. Customers will now see "
Invalid User" for those entries as illustrated below.

If the user exists as a client in the UAA, the product team is working on this issue and it will be fixed in a future release.