How to prevent creating new resources for the same Users when AD Connector is used