Duplicated users in AzureAD

Sometimes it happens, users syncronized from OnPrem to AzureAD, are not being soft matched, and it’s necessary to do a hard match, in this post I will explain the basic steps to do it:

1. Disable the sync for that particular object, my recommendation would be to create a OU in your AD which is not being selected to be synchronized
2. Execute a Sync Delta in your ADConnect Start-ADSyncSyncCycle -PolicyType Delta
3. Check that the bogus user has been deleted, and delete it from Recycle bin withRemove-MsolUser -UserPrincipalName <user> -RemoveFromRecycleBin
4. Find the users ObjectIDldifde -d "CN=username,CN=Users,DC=domain,DC=local" -f C:\user.txt
5. Find objectGUID:: in c:\user.txt
6. If you don’t like the previous step, you can search for the sourceanchor in the metaverse of AADConnect,
7. Update AzureID, setting the object ID to sync with toSet-MsolUser -UserPrincipalName <upn> -ImmutableId <objectGUID>
8. Now, sync withStart-ADSyncSyncCycle -PolicyType Initial

With this, what we are doing id a hard match for the user, once is done, you’re ready to go

Advertisement