[FIM] invalid-dn, Multiple values were specified for an attribute that can have only one value.

FIM error:

Error: invalid-dn, Multiple values were specified for an attribute that can have only one value.

I thought there were multiple values set to the same property (including the http://support.microsoft.com/kb/286760 .)

However, after careful observation, we found that the common cause of such problems was that they had multiple spaces.

The reason is that when cn is set, spaces at the end are not recognized by AD. However, when userPricipalName is set, we set username <space> @ xxxx.com

Therefore, there are two kinds of inconsistency between user login names.

You only need to do str. Trim () when setting accountName.

After the modification, You need to delete the data again and then run FULL_IMPORT + FULL_SYNC on the ad ma to activate the Provisioning operation on the data source.