We are using SharePoint 2016 and ADFS 2016. I have a situation that userX requested permissions to siteA. We are using the OOTB request access approval functionality. The approver received an email and approved the request. userX received an email that he has access to siteA but when he clicks on the hyperlink he still received an access denied. I can see userX in the OOTB contributor group. When I try to add userX manual in the contributor group I see a second user "userX" in this group. When I click on the latest one I will be redirected to the mysite of userX. When I click on the older userX I see the detail view of a list item.
Why I see 2 differant accounts in this SharePoint group? Is one from ADFS and the other from somewhere else?
In the people picker everything is working fine. When I search for a user it shows the email address and is unique. There are no duplicate users. When I give a user permissions it works fine.
See below the people picker:
See below the "request access" list with the wrong user (NTLM account):
I try to figure out to get the detail info of both user accounts by running this rest service: https://projects.mycompany.com/p/172/_api/web/siteusers
I see now this detail info below. It looks like one is a windows account, and the other one is from ADFS. Why SharePoint "Request Access" is using the windows account when someone requests access on a site?
It looks like I have the same issue as this forum post: