Error updating user: returned identity already exists

Are you getting this error when updating a user’s record in ISS stating

loadResource(): returned identity [User:] already exists?

If so, then this error is due to missing extended attributes in LDAP. The extended attributes are what allow ISS to know that the user exists in LMK and are created when a user is added via ISS or the user is included in a sync.

Simply run a full sync via the ISS webpage to create the extended attributes

To prevent this issue going forward you should add a list-based sync to the user add process. This should resolve the error completely.