i can't add a user, because the admin console says "user is already associated with your organization", but, they're not, in the sense that if i list "users", that user isn't there.
on the "account.adobe.com" side of things, the user is there and associated.
it might be related to having changed the email on the "account" side, then that doesn't get reflected on the "adminconsole" side, but, on that side, the email is the "Adobe ID" and cannot be modified.
So ... how to clean this up?
Identity and SSO
Users and groups