diff --git a/provisioning/provisioning-impl/src/main/java/com/evolveum/midpoint/provisioning/impl/ShadowCache.java b/provisioning/provisioning-impl/src/main/java/com/evolveum/midpoint/provisioning/impl/ShadowCache.java
index b286e993a85..8f7049af8ae 100644
--- a/provisioning/provisioning-impl/src/main/java/com/evolveum/midpoint/provisioning/impl/ShadowCache.java
+++ b/provisioning/provisioning-impl/src/main/java/com/evolveum/midpoint/provisioning/impl/ShadowCache.java
@@ -1589,7 +1589,7 @@ private PrismObject<ShadowType> completeShadow(ConnectorInstance connector, Pris
 		if (resourceAssociationContainer != null) {
 			RefinedResourceSchema refinedSchema = RefinedResourceSchema.getRefinedSchema(resource);
 			PrismContainer<ShadowAssociationType> associationContainer = resourceAssociationContainer.clone();
-			resultShadow.add(associationContainer);
+			resultShadow.addReplaceExisting(associationContainer);
 			if (associationContainer != null) {
 				for (PrismContainerValue<ShadowAssociationType> associationCVal: associationContainer.getValues()) {
 					ResourceAttributeContainer identifierContainer = ShadowUtil.getAttributesContainer(associationCVal, ShadowAssociationType.F_IDENTIFIERS);