The boolean multiple-results configuration option will provision multiple objects on a target LDAP directory for a single subject.

<source-subject-identifiers>
<source-subject-identifier source="jdbc" subject-attribute="id">
<ldap-search base="ou=testpeople,${base}" scope="subtree_scope" filter="(cn=

{0}

)"
multiple-results="false" />
</source-subject-identifier>
</source-subject-identifiers>

If two objects have the same cn

dn: cn=test.subject.1,ou=testpeople
cn: test.subject.1

dn: cn=test.subject.2,ou=testpeople,
cn: test.subject.2
cn: test.subject.1

and a group has one member "test.subject.1",

then both objects will be provisioned if multiple-results="true"

dn: cn=groupB,ou=edu,ou=testgroups,${base}
hasMember: name.test.subject.1
member: cn=test.subject.1,ou=testpeople
member: cn=test.subject.2,ou=testpeople

dn: cn=test.subject.1,ou=testpeople,dc=testgrouper,dc=edu
ismemberof: edu:groupB

dn: cn=test.subject.2,ou=testpeople,dc=testgrouper,dc=edu
ismemberof: edu:groupB

The hasMember (group-members-name-list) value is single valued since the single subject with identifier "test.subject.1" has two provisioned objects.