An Enrollment Flow configured with Enrollment Sources appears to be able to create two Primary Names. Relevant configuration appears to be:

• Petitioner Enrollment Authorization: Authenticated User
• Enrollment Attribute: Name (Official, CO Person), populated from ENV_OIS_NAME
• EnvSource in Authenticate mode
• Possible relevant: Additional Enrollment Source in Search mode