I would like to have a way to force synching with AD on-demand.

I've had one instance where one of our users switched mobile numbers however their contact information never changed within Ignition.

Full details can be found here: https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892