In a AD driver, I've got 2 attributes set to notify. As I need those
attributes if they are present in the user even in case of a match
(where the engine do a "merge") I have set the Merge Authority to
Identity Vault.

Does anybody knows why sometimes I didn't get those attribute after a
match has been found ??