DMA error migrating to Federated O365: The parameters passed to the cmdlet represent a managed account, which doesn't match the namespace state, which is federated (4335932)

DMA error migrating to Federated O365: The parameters passed to the cmdlet represent a managed account, which doesn't match the namespace state, which is federated

When migrating to a Federated O365 hybrid domain some source accounts may produce the following error while others migrate successfully:

"The parameters passed to the cmdlet represent a managed account, which doesn't match the namespace state, which is federated"

It is not possible to create an O365 Managed object in a Federated domain because in a Federated domain, O365 offloads the authentication to an On-Premises AD directory service instead of managing the account in O365.

In a Federated domain, O365 uses the UPN of the source account to match and tie it to the respective O365 mailbox.  If the source account lacks a UPN in source, it appears as if an O365 Managed account is trying to be created instead.

The failure to migrate the account occurs because the source account lacks a UPN.

Give each of the affected source accounts a UPN and then migrate the account to O365 again.

It is possible to check which domains are set as Federated by using the following steps: Download and install at http://onlinehelp.microsoft.com/en-us/office365-enterprises/hh124998.aspx Run: $cred=Get-Credential. When the cmdlet prompts you for credentials, type your Office 365 administration account credentials. Run: Connect-MsolService -Credential $cred. This cmdlet connects you to Office 365. Run: Get-MsolDomain