AD Connect Sync Error: Cannot merge multiple values to a single-value attribute target Manager

I keep getting this error on my AD Connector when I try synchronizing a particular user. I examine the user to see what is unique about this user. Well the user is a manager of himself/herself, because they own the company or the person is at the top of the company hierarchy. If I remove the person from the manager field synchronization works well.

The case

There are two forests, connected via FIM GALSync, User1 is appears in forest1 as a regular AD account and in forest2 as a contact. The contact has been imported by AD Connect and exported to Azure AD. Now I want to import the User account and this is where it fails.

I do not want to remove the user from the Manager field in AD because one, that could affect applications that are dependent on that information and two, I have to add it back after getting through the synchronization error and then we are back to where we were. So I need a persistent solution.

The Solution

Create a new Sync Rule to filter out the Contact from the synchronization.

  1. Start the Sync Rule Editor, its in Program Files\Microsoft Azure AD Sync\UIShell
  2. Enter a name for the rule “Filter out User1 contact”
  3. Connect system select the AD with the contact
  4. Connected System Object: Contact
  5. MV Object: Person
  6. Link Type:Join
  7. Precedence, I gave a low number 51 so it was close to top of the Rules list
  8. Click next to scoping.
  9. In Scoping filter, click Add Group, click Add Clause and in attribute select Mail. Make sure the Operator is set to EQUAL and type the value user1@mydomain.com in the Value box. Click Next.
  10. Leave Joins rules empty and click next
  11. At Transformation, click “Add Transformation”. FlowType: Contant, Target Attribute: CloudFiltered, Source: type in True. Click Add at the bottom.

Go to the Sync Manager

  1. Go to the MA of the forest with the contact. Click search connector space. Look for user1. Click preview, then click commit preview. This will remove the Windows Azure Active Directory (WAAD) entry in the WAAD connector space.
  2. Go to the WAAD MA and run an Export to delete the contact in Azure AD. Run delta import after to confirm the export.
  3. Go to the MA of the forest with the user. Click search connector space. Look for user1. Click preview then click commit preview. This will join the user and contact objects of User1.

Go the Sync Rule Editor

  1. Disable the new rule “Filter out User1 contact ” you just created.

Go to the Sync Manager

  1. Go to the MA of the forest with the contact. Click search connector space. Look for user1. Click preview, then click commit preview. This will add the WAAD entry in the WAAD connector space.
  2. Go to the WAAD MA and run an Export to Add the User in Azure AD. Run delta import after to confirm the export.
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s