APM Ldap Query and SSO

As per my knowledge, put this in the AD Query for samAccountName

(sAMAccountName=%{session.logon.last.username})

In the SSO you can pass this variable. (SSO Credential Mapping)

SSO Token Username

expr {"{session.ad.last.attr.sAMAccountName}"}