[Freeipa-users] Locked users synchronisation

Hi guys, I'm not sure if this is ok or not. I have two freeipa servers and when user get locked I can see this only on one server. I check ipa-healthcheck and both servers working OK. Do I have to change any settings for that or this is how system works? In future I'm planing to add few more servers and I think when user will get locked won't be very convinent to go through 4-5 server to find locked user. I'm running IPA 4.10.2 on Rocky 9.3. I read post from 7 years ago that is in system but I wonder if anything changed since then? Regards Ales