Problem with AD synchronization with AAD

Question

Good day,

I am trying to soft match a user from AD to AAD, but every time I try, the two profiles do not match, and a second profile is created in AAD. The following error appears in Entra Connect Manager, even though I changed the SMTP address to a different one and performed the soft match again. Below is the error message from Manager:

Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses <pii>SMTP:<removed PII>@vertiflex.eu,smtp:<removed PII>@Log<removed PII>.onmicrosoft.com</pii>;UserPrincipalName <pii><removed PII>@vertiflex.eu</pii>;]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values.

Tracking Id: 5d67abbf-2eab-<removed PII>

ExtraErrorDetails:

[{"Key":"ObjectId","Value":["f3XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXa0"]},{"Key":"ObjectIdInConflict","Value":["e0XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXd1"]},{"Key":"AttributeConflictName","Value":["ProxyAddresses"]},{"Key":"AttributeConflictValues","Value":["SMTP:******@xxxxxx.eu"]}]

*I filled in some of the information with the letter X.

Answer 1

Ahoj Jakube. Toto jsou ceska fora, pis prosim cesky, Take DURAZNE nedoporucuji zverejnovat sem mailove adresy, tedy pokud si vazis sveho soukrom.

Soustred se na nejednoznacne zaznamy v lokalnim AD. Rychle bude vysypat si prec csvde do Excelu, a overit jednoznacnost UPN a SMTP.

Viz https://learn.microsoft.com/en-us/answers/questions/1376410/azure-ad-sync-unable-to-update-this-object-because , https://learn.microsoft.com/en-us/previous-versions/troubleshoot/microsoft-365/admin/duplicate-attributes-prevent-dirsync a zminovany nastroj idFix https://microsoft.github.io/idfix/

MP