Duplicate users being created by... something!
This was resolved by removing the user's current employer, saving the record, and then re-adding the current employer.  Seems potentially to have been some problem around the cascading membership?