AD query for a user from a trusted domain (forest trust)

By default the AD query item is configured with the default filter search "sAMAccountName=%{session.logon.last.username}".

If the username variable used to authenticate on domainB directory can't be use for the AD query in the domainA directory (because the username is set with value "domainB/username" for example), then the solution is:

1. Create a Variable Assign item before the AD query to set a new variable (eg session.custom.username) with some TCL code to parse the origin username.

    

2. Update the search filter in the AD query item to use this new variable ("sAMAccountName=%{session.custom.username} for example".

    

Hope that help.