What creates a duplicate profile?

Authorize.net looks at the email and customer ID. If you don’t have a customer ID mapped in your feed settings, be sure to require and email address.