DirSync for AD: A value in the request does not comply with certain constraints. The attribute was: (userPrincipalName) Error during CreateObject (4314878)

DirSync for AD: A value in the request does not comply with certain constraints. The attribute was: (userPrincipalName) Error during CreateObject

Several user objects failed to sync to the target Active Directory. The following error was recorded in the Sync Log (full details are available in the attached message file):

A value in the request does not comply with certain constraints. The attribute involved is userPrincipalName.

Error details:

• Operation: CreateObject

• Object DN: CN=John Doe,OU=Org1,OU=Org2,DC=ad,DC=ABC,DC=com

• Object ID: 12345

• Result code: ConstraintViolation

• AD Exception: 000021C8: AtrErr: DSID-03200BE8, #1: 0: 000021C8: DSID-03200BE8, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 90290 (userPrincipalName)

This indicates that the userPrincipalName attribute for the object does not meet Active Directory constraints, preventing the account from being created in the target AD.

The users are not getting created due to AD Constraints in the Target AD and the attribute that looks like being the issue is UPN.

1. Check in the Target if there is already an existing user with that UPN.
2. Make sure the profile is picking up the correct source and target OU.