Duplicate Attribute - Hundreds accounts with the same email address

Question

Duplicate Attribute - Hundreds accounts with the same email address

Marcel Sic 20

Hello, we have many accounts with the same email address. When we started the synchronization of accounts to Microsoft Entra ID, we got error AttributeValueMustBeUnique in Synchronization Service Manager and of course also 'Duplicate Attribute' in Entra ID. We need to keep the email addresses as it is. Why this is OK in on-premise Active Directory and not OK in Entra ID? Is it possible to fix these errors? Thank you

1 answer

Your answer

Answer 1

Akhilesh Vallamkonda 15,320 Microsoft External Staff Moderator

Hi @Marcel Sic

Thank you for reaching out to the community forum.

The error message AttributeValueMustBeUnique is represents there is a conflict with the attribute value that needs to be unique because Microsoft Entra ID schema doesn't allow two or more objects to have the same value of certain attributes, including email addresses.

To fix this issue you need to identify which object should be using the conflicting value and correct or remove the duplicate values in your local directory.

If you have Mutiple users with the same email address or if the issue is still persisted, please try to match the objects manually by using the ImmutableID attribute which is a unique identifier for each object also known as a hard match.

Hope this helps. Do let us know if you any further queries.

For more readings: https://answers.microsoft.com/en-us/msoffice/forum/all/attributevaluemustbeunique-error/a4cad948-8acc-4f80-ad0a-ace6cd896276

How to Hard Match a User in Office 365

Thanks,

Akhilesh.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Marcel Sic 20 Reputation points

2024-03-15T15:25:25.4066667+00:00

Hello, thank you for your response. Unfortunately, this is not very helpful. We have 1300 accounts, among which 2 to 10 accounts share the same 'mail' attribute. In the future, we anticipate creating more similar accounts with shared 'mail' attributes in our on-premise AD. According to the link you've provided, both the 'userPrincipalName' and 'mail' attributes should have identical values. However, our 'userPrincipalName' differs for each account that shares the same 'mail' value.

As stated in the article, "Mismatching userPrincipalName and/or mail addresses can cause problems down the road and complicate future troubleshooting." Therefore, we need to somehow disable the 'mail' duplicity check in Azure or implement a similar solution.
Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2024-03-19T10:32:56.8466667+00:00

@Marcel Sic Wanted to share this article - https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-syncservice-duplicate-attribute-resiliency also do share your contact details to Akhilesh via Private message so that we can connect offline on this.
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2024-03-22T05:15:10.9433333+00:00

@Marcel Sic

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Share via

Duplicate Attribute - Hundreds accounts with the same email address

1 answer

Your answer