Forum Discussion
Add UPN to existing policy
I have an existing access policy - login page ---- ad auth --- sso. I need to add userprincipalname as a username option.
Do I add ad query before ad auth or add a branch rule to the login page?
2 Replies
- The-messenger
Cirrostratus
In our AD, UPN and samaccountname do not contain the same user or domain. Our upn is our email address using a different formant for the name portion than we use for our ad user name.
as an example userprincipalname/emailaddress = [email protected] samaccountname = first-two-initialslastname
- The-messenger
Cirrostratus
I did this changing to LDAP. With LDAP I can use the mail attribute and leave UPN alone, at this point.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com