Forum Discussion
JustCooLpOOLe
Cirrocumulus
CirrocumulusPulling Email Address from CAC as opposed to UPN
Hi, I'm trying to work on a fallback solution to where instead of a UPN being presented by a user certificate for on-demand cert auth, we can pull the email address similar to this article: ht...
great it works, on to the next challenge indeed.
boneyard
MVP
MVPyou are doing on-demand cert auth right? because a cert is required to have those session.ssl.cert.x509extension filled.
when you look at your APM session variables after authentication can you find the session.ssl.cert.x509extension variable with any content?
JustCooLpOOLeCirrocumulus
CirrocumulusYeah. I think I figured it out. I just needed to adjust the logic within the original link I specified. Now I'm onto trying to do a search filter with either value in a AD Query.
- boneyard
great it works, on to the next challenge indeed.
