For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Geir_Sandbu_342's avatar
Geir_Sandbu_342
Icon for Nimbostratus rankNimbostratus
Feb 10, 2016

ActiveSync access without domain name in Logon

Hi   We have a small problem with Active Sync for one of our customers. We have deployed Exchange ActiveSync using the iApp template f5.microsoft_exchange_2010_2013_cas.v1.5.1. Our system is runni...
application delivery
BIG-IP Access Policy Manager (APM)
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Feb 10, 2016

you could try adding a variable assign after the AD Auth and set something like 

session.custom.domainusername
to 
[mcget {session.ad.last.actualdomain}]\[mcget {session.logon.last.username}]
. Do you have an SSO credential mapping action in you policy there? If so, you could change the username field to 
session.custom.domainusername
instead.

Also, on the login page, make sure the checkbox is there to split domain from username (may not make a huge difference for you, but then again it might help with those who do use domain\username to not fail after this change)