The first workflow will create the filter group in the target or match, and will create the objects in the target, but the group membership will not be built if the group is added to the target before the target users are created.
The second workflow run will match the group and populate the group membership. The Dirsync back-end does not have the list of target users at this point because the Read was performed before the target group membership was populated.
A third workflow run will be able to read the target users because the group used for filtering has a list of members which are now in scope. The match step will match the users.
Run the workflow up to three times to get the source objects matched in Dirsync.
To reduce the number of workflow runs modify your workflow to include the following steps.
Read, Match, Stage, Write, Stage, Write, Read, Match
This configuration is the same as running the workflow three times.
