Shawn Bestvater

Similar example, though likely of our own doing… SSO sync created some duplicates based on UPN which isn't the same as primary email.  Other “duplicates” were agent accounts being retained (whew!) but now with a new End User account.  

I can remove the unused end user accounts and merge the duplicates as we are a small shop, but wanted to pile on how I could see this being a pain for a live environment that has any volume.