3794455 - Duplicate user accounts provisioned to Microsoft entra during rehire with old employment

• Duplicate user accounts are provisioned into Microsoft Entra during the rehire process with old employment.
• An employee is terminated and the corresponding AD account is disabled; upon rehire using “Rehire with Old Employment,” duplicate accounts are created.
• No error messages are shown.

SAP SuccessFactors Onboarding

1. Terminate an employee and disable the corresponding AD account.
2. Rehire the employee using “Rehire with Old Employment.”
3. Observe that duplicate user accounts are provisioned into Microsoft Entra.

• During “Rehire with Old Employment,” the system creates a new process and then automatically cancels it by design, leaving an orphaned inactive profile visible in search results.
• If the provisioning connector for Microsoft Entra is not matched/anchored to personIdExternal, a new identity can be created on rehire, leading to duplicate accounts.

1. Set the primary matching attribute in the Microsoft Entra provisioning app to personIdExternal so rehires are matched to the existing person record rather than creating a new account.
2. Configure scoping filters in the Microsoft Entra provisioning app to exclude inactive/cancelled or orphaned profiles from being provisioned.
3. Review and configure the Hire/Rehire Configuration object in SuccessFactors Employee Central, enabling duplicate checks to prevent unintended new employment records during rehire.
4. Validate the end-to-end mapping (userId, userName, and personIdExternal) to ensure person-level anchoring and consistent identifiers across rehire scenarios.
5. Test changes in a non-production environment, then run a targeted delta or full sync to verify that only the existing account is updated and no duplicate is created.
6. Monitor subsequent rehire events to confirm the duplication no longer occurs and adjust filters/mappings as needed.

• KBA 3675385 - Duplicate profiles created during rehire with old employment - Onboarding
• Creating the Hire/Rehire Configuration Object (Including Duplicate Check)
• Microsoft Entra ID and SAP SuccessFactors integration reference

rehire with old employment, duplicate accounts, duplicate provisioning, Microsoft entra id, active directory, successfactors, personIdExternal, matching attribute, scoping filters, onboarding rehire verification, orphaned inactive profile, user provisioning, rehire, azure ad, identity provisioning , KBA , LOD-SF-OBX-RHM , Rehire Mechanism , Problem