# AD Duplicate Account Creation

**URL:** <https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, provisioning\
**Created:** [April 29, 2025, 9:46pm UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066 "2025-04-29T21:46:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [April 29, 2025, 9:46pm UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066/1 "2025-04-29T21:46:14Z")

</div>

Folks,

I am seeing duplicate AD accounts being provisioned for several identities—each duplicate appears just seconds after the original. I’ve reviewed the configuration and can’t find a cause. Any ideas on what might be triggering this?

Here is one example:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/d/b/db122ab8e7d58e839c8596dc074dbd61356a17fe.png)

As you can see, there is a gap of only 8 seconds between these two activities.

 ![image (1)](https://global.discourse-cdn.com/sailpoint/original/3X/0/5/05e1c10ddea906f7da606380ecf81f9f2c0be95f.png)

 ![image (2)](https://global.discourse-cdn.com/sailpoint/original/3X/c/1/c1f89fc25dfcb244f677bbe3c8de0583db222d51.png)

 ![image (3)](https://global.discourse-cdn.com/sailpoint/original/3X/b/8/b8f0fcef1bdccf358e13908ad645e55d1890f62c.png)

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/b/8/b8b6d58ad2b110489aa00babb77f892e632b06bf.png)

On the identity, here are the events

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/4/84280dccb5b989fe497d3eb45e5b0e2e82ace2e4.png)

---

<div class="post-metadata">

**Author:** ![chaithu979](https://avatars.discourse-cdn.com/v4/letter/c/f0a364/32.png) [@chaithu979](https://developer.sailpoint.com/discuss/u/chaithu979)\
**Post date:** [April 30, 2025, 4:34am UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066/2 "2025-04-30T04:34:00Z")

</div>

1. **Duplicate Entitlement or Role Assignment**  
2.If the identity is aggregated from multiple sources and both are configured with provisioning capability, IdentityNow might trigger duplicate account

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [May 21, 2025, 4:23pm UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066/3 "2025-05-21T16:23:01Z")

</div>

An update,

SailPoint determined it was caused by multiple aggregation jobs running concurrently, triggering accidental refresh, and causing account creation request. The issue was resolved by enabling a feature flag that prevents duplicate account creation.

---

<div class="post-metadata">

**Author:** ![gscalia](https://avatars.discourse-cdn.com/v4/letter/g/fbc32d/32.png) [@gscalia](https://developer.sailpoint.com/discuss/u/gscalia)\
**Post date:** [May 22, 2025, 2:21pm UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066/4 "2025-05-22T14:21:33Z")

</div>

Hello Sunny.

I’m experiencing the same issue. How did you fix it? Was the feature flag involved, or what exactly does it do?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [May 22, 2025, 4:53pm UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066/5 "2025-05-22T16:53:47Z")

</div>

@gscalia  
Create a support ticket for SailPoint team and let them do the RCA on your issue. If cause is same as mine, then they should be able to enable the feature flag in your tenant. Remember this is an internal feature flag to which only SailPoint has access.

Hope this helps.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 21, 2025, 4:54pm UTC](https://developer.sailpoint.com/discuss/t/ad-duplicate-account-creation/123066/6 "2025-07-21T16:54:24Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.