Hi @Parul Chaudhary,

I personally trust the SaaS direct integrations and am convinced that the corresponding changes (addition/removal) of product rights are mapped correctly.

• Are the subscription identifiers for the two products different or is the user assigned to the same identifier twice?

• With the help of the API (and certainly also the portal), it is possible to gain an insight into the current group/user configuration and, if necessary, draw conclusions about the cause

  •  

    First, we need to know all active groups and applications from the portal -> "Retrieves a paged list of all user groups and product profiles in your organization along with information about them"
    https://adobe-apiplatform.github.io/umapi-documentation/en/api/group.html

  • Second, we need to know the user - group/application relationship -> "Gets a paged list of users in a specific group of an organization along with information about them. Groups can be named user groups, product profiles, or group-specific administrative groups."
    Get Users by Group (adobe-apiplatform.github.io)

Please try to identify the group/application managed in the Adobe Portal based on the linked subscription identifier imported by SAMP. If the identifier is different, then I would also expect two results per user for “All Apps” (*Pro), but you should also find this out with the help of the Adobe Admin via the portal.

If your Adobe portal is synced with your Azure AD, you should also check the AD groups responsible for each app if the users are members of both groups.

Edit: Could you please try to remove a few subscriptions and run the Adobe import again to see if both are re imported.

Best, Dennis