How to Add a New UPN Suffix to ARS with existing Policies
A new UPN Suffix was added to the forest and user accounts still do not have the option in their properties to choose the newly Added UPN Suffix. Also, user account creations also do not allow or have the option to select the new UPN Suffix.
ActiveRoles Server has a Property Generation and Validation Policy disallowing any UPN Suffix other than what is listed in the Provision Policy.
Locate any and all Provision Policies that contain the Property Generation and Validation Step titled Validates the 'UPN Suffix' property values for 'User' objects. See Screenshot: Policy Step
Highlight the policy step and choose View/Edit
In the policy step properties page, locate the section towards the bottom that has the must be: statement containing the existing UPN Suffix. See Screenshot: One UPN Suffix
Click the hyperlink <click to add value>
Input the newly added UPN Suffix in the text box and choose OK.
Verify that both the existing and new UPN Suffix are now in the must be: statement. See Screenshot: New UPN Suffix