@developer_advocates IDK which one of you wrote this comment in the discourse saas connector, but I remembered reading it when looking through the code and it dawned on me that the API I’m interacting with returns group ids as an integer and I wasn’t converting it into a string. After I did that, the issues I described above have gone away. 
tl;dr
make sure the account/entitlement ids that you send back to IdN are strings and not numbers or it makes it very unhappy