At this point we have 2 metaverse objects and 2 FIMMA connectorspace objects pending export.
Failed-Modification-via-web-services: FIMMA CS Object 1 gets this error since domain attribute was wiped out on sync.
Failed-Creation-via-web-services: FIMMA CS Object 2 gets this errror since the objectSID violates uniqueness, as the original FIM Portal object has the same value populated.
Cleanup with this type of thing can seem tricky, especially if its affecting a fairly large number of objects, but not all objects. We resolved the issue by adding an Import Attribute flow on the FIMMA for Domain->Domain. We then Ran a Sync on the FIMMA.
Running an Export was successful for both objects resolving the error. We then deleted the bad objects from the Portal, and ran the following
Alternatively, we could have also used attributes to find the 'bad' objects in the Portal that did not have AD connectors, and filtered them from the subsequent sync. We configured FIMMA deprovisioning to 'stage a delete on next export run'.
Most of these 'failed-creation-via-web-services' or 'failed-modification-via-web-services' come about in a similar manner: Object deletion rules and deprovisioning not configured correctly to handle the situation.