Okta Microsoft 365 Profile Push Error Due to Duplicate Attributes
Last Updated:
Overview
When pushing a user profile to Microsoft 365, the provisioning flow fails with an AttributeValueMustBeUnique error. This occurs because the user has an attribute, such as ProxyAddresses, that already exists on another object in the Microsoft 365 directory. Resolve this issue by identifying the conflicting object in Microsoft 365 and removing or correcting the duplicate attribute.
Could not push profile for Office 365 user <username>, received error: Could not push profile for Office 365 user <username>, received error: [syncOperation=Set, alias=null, sourceAnchor=<sourceAchor>, userPrincipalName=<username>, mail=<mail>, displayName=<dislayname>, commonName=<commonname>] errorCode=AttributeValueMustBeUnique, errorDescription=Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [OnPremiseSecurityIdentifier System.Byte[];ProxyAddresses <proxy address>;]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values., info=null SyncException Details: httpErrorCode=0, serviceErrorCode=null
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Microsoft Office 365
- Provisioning
Cause
This error occurs because the ProxyAddresses attribute value pushed from Okta already exists on object in the Microsoft 365 tenant. Microsoft 365 requires these attributes to remain unique across the entire directory.
Solution
How is the Microsoft 365 duplicate attribute error resolved?
Resolve the duplicate attribute error by identifying the conflicting object in Microsoft 365 and updating the attributes to ensure uniqueness.
- Access the Entra Audit logs or use Microsoft Graph PowerShell to search for the duplicate attribute value mentioned in the error message.
- Identify the conflicting object that currently holds the duplicate value.
- Remove or modify the duplicate attribute on the conflicting object in Microsoft 365, or update the Okta user profile to use a unique value.
- Navigate to Dashboard > Tasks in the Okta Admin Console.
- Locate the failed provisioning task for the user and select Retry Selected.
