I am creating new AD accounts on the fly in a workflow. Once created I call SPWeb.EnsureUser, then add the user to a SPGroup. If I browse to the group I see my new account in there. If I log out and try to log in as the new account (FBA site) it denies me access. If I give it about 15 minutes it'll let me in.
I'm guessing this is due to Active Directory propagation and updating the SharePoint servers. However, SharePoint sees the user account and the user is added to a group.
Is there a way around this? Can I force a refresh or tell SharePoint "trust me, this guy is okay"?