We get two lists of users, those in identity but not keyserver and vice versa. We log the users missing from keyserver (this probably means a delete call to identity failed). We delete all ios/android cookies for the users missing from identity to trigger a new login request on these users' devices (in the background).
This triggered request will then populate the identity service with the relevant user data.