Here is what we are encountering
We would like to activate Active Directory in our SAP Portal. We have been in the process of changing all of our AD user IDs to match what is in the SAP Portal. When we change the SAP Portal setting to "Microsoft ADS Read-Only (Deep Hierarchy) + Database" we end up with 2 ids for each user. When we try to log onto the Portal we get an authorization fail due to duplicate id's . If we get rid of the original UME Portal id it works, but we would have to recreate all roles for tthe AD user in the UME, a massive effort.
(1) Is there an easy way to combine the ids
or
(2) an SAP setting that will allow for duplicate ids?