Troubleshooting Source Anchor Issues during Installation

This article explains the different source anchor related issues that may occur during installation and offers ways to resolve these issues.

Invalid Source Anchor in Microsoft Entra ID

Custom Installation

During custom installation, Microsoft Entra Connect reads the source anchor policy from Microsoft Entra ID. If the policy exists in Microsoft Entra ID, Microsoft Entra Connect applies the same policy unless it is overridden by the customer. The wizard informs you which attribute has been read. Additionally, the wizard warns if you try to override the source anchor policy.

During this read operation, it is possible that the source anchor policy in Microsoft Entra ID is unexpected. In this case, Microsoft Entra Connect does not know what the source anchor to use and needs manual override.

To resolve this issue, you can manually override the source anchor by selecting a specific attribute. Proceed with this option if and only if you are certain of which attribute to select. If you are not certain, contact Microsoft support for guidance. If you change the source anchor policy, it can break the association between your on-premises users and their associated Azure resources.

Express Installation

During express installation, Microsoft Entra Connect reads the source anchor policy from Microsoft Entra ID. If the policy exists in Microsoft Entra ID, Microsoft Entra Connect applies the same policy. There is no option to do manual override.

During this read operation, it is possible that the source anchor policy in Microsoft Entra ID is unexpected. In this case, Microsoft Entra Connect does not know what the source anchor should be.

To resolve this issue, you need to re-install using the custom mode and manually override the source anchor by selecting a specific attribute. Proceed with this option if and only if you are certain of which attribute to select. If you are not certain, contact Microsoft support for guidance. If you change the source anchor policy, it can break the association between your on-premises users and their associated Azure resources.

Invalid Source Anchor in Sync Engine

During installation, it is possible Microsoft Entra Connect attempts to configure the sync engine using an invalid source anchor. This operation is most likely a product issue and the installation of Microsoft Entra Connect will fail. Contact Microsoft support if you run in to this issue.

Next steps

Learn more about Integrating your on-premises identities with Microsoft Entra ID.