1

we have a sharepoint 2016 on prem with an user profile connection configured for active directory. we have also an claim provider for ADFS for the same domain used in an extranet scenario. When we try to add the the 'synchronization connection' configured with the ADFS claim provider we get

Cannot insert duplicate key row in object 'dbo.ADImportDCMapping' with unique index 'IX_ADImportDcMapping_DCName'. The duplicate key value is (edited.local, DC=edited,DC=local). The statement has been terminated.

is it possible to add a second connection to the same domain with a different authentication provider? we have a similar setup on an sharepoint 2013 that gave us no issue and on the profile config database we see no rows, while in the sharepoint 2016 profile we effectively see one row.

we have also tried different contaner but the definition of the index IX_ADImportDcMapping_DCName prevent us from using the same domain.

many thanks

0

Do not do this.

You will produce (or can't :)) duplicate User Profiles. This breaks various OAuth scenarios. In addition, a user cannot have two identity providers and be considered the same identity. That is, if a user logs in with Windows Claims auth, their SAML identity will not be considered the same user when it comes to SharePoint permissions.

-1

thanks Trevor, you shed some light in a very obscure matter for me. I think that I've always integrate ADFS with sharepoint in the wrong way. time to review my whole idea on plan extranet access to sharepoint by ADFS.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.