Office 365 Azure AD Connect Sync Issues

Hello
I have AD users that are non-employees but in our domain to use our SharePoint 2013 on-prem instance.  At the same time they are also a mail contact as they need to be in distribution groups.  We use Office 365 for Exchange Online and azure ad connect to sync our users from AD to Office 365.

Since this user has an email address in their profile and the same email for their mail contact I am getting an Identity synchronization Error Report for this selected user.  In the error description it notes the the user's ProxyAddress duplicated in active direct (mail contact).  But we actually need to the duplicates to exist.

Wondering if anyone has run into this issue and best way around the issue?
EA-170Asked:
Who is Participating?
 
Todd NelsonConnect With a Mentor Systems EngineerCommented:
Is there a specific reason you have the E-mail field populated for that AD user?  I am certain that is what is causing the conflict.  It's not necessary to have anything in the field if there is no mailbox for the user.  Remove the unnecessary data in the field and the syncing will occur without error.

Alternatively, you could not sync the AD user to O365.  To do that, I suggest configuring OU and/or attribute filtering with AAD Connect to resolve.

AAD Connect Filtering References...
0
 
Vasil Michev (MVP)Connect With a Mentor Commented:
You cannot have duplicate proxy addresses in O365. Simply change the proxyaddresses attribute of one of the objects. Or dont sync them both to the cloud (here's the article on how to exclude certain objects from sync: https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnectsync-configure-filtering/#configure-attribute-based-filtering)
0
 
EA-170Author Commented:
If I remove the proxyaddress from the mail contact being sync, will that break the mail contact?  This would be my apprehension with doing this, just want to make sure the mail contact would continue to exist and work
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Vasil Michev (MVP)Commented:
You need to have some address for it.
0
 
Todd NelsonSystems EngineerCommented:
Does the user have a mailbox on premises or a contact; or both?  If no mailbox, I would suppose the E-mail field under the General Tab is populated with the same address that was set for the contact and that is causing the conflict.

Am I understanding that correctly?
0
 
EA-170Author Commented:
Correct - user doesn't have a mailbox in either the cloud or on-prem but their external email is on the general tab.  That same external email address is their contact email address.
0
 
EA-170Author Commented:
We have SharePoint onsite and thought the email in the user's profile is sync from AD to SharePoint through the user profile service
0
 
Todd NelsonSystems EngineerCommented:
Unfortunately, I'm not familiar with SharePoint to say if it utilizes the Email field or not, or if that is what is required to be synchronized to SharePoint Online.

You could always test a theory by removing the email address and put the value back if it is needed.

I do know, however, that you cannot have duplicates across your AD objects or syncing will not occur for the conflicting objects until the conflict is resolved.
0
 
Todd NelsonSystems EngineerCommented:
EA-170,

Will you provide a status update to your request?
0
 
EA-170Author Commented:
sorry for the lack of feedback - got caught up on another issue but was able to resolve by removing the email address in the proxy address attribute.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.