APM 2-Factor Radius and AD Authentication user accounts sAMAccountName and UPN suffixes

Hello,

 

my question is, I have a apm scenario, landing page, Radius Auth. (SafeNet), the Radius Auth need the sAMAccountName for example doej than I give at the landing page the OTP (onetimepassword) and the AD Password which I switch which a variable assignment, but now I want to do a ldap auth and for the ldap auth we need the UserPrincipalName (email) for example john.doe(at)company.com. So my question would be now, how can I check maybe with a ldap query the UserPrincipalName to switch from doej -> john.doe(at)company.com that the ldap auth will not fail and the SSO is after this correct working, maybe someone have a idea, need I an iRule or just a ldap query the expressions and so on ? Please give some examples

 

THX Manu