Forum Discussion

AngryCat_52750's avatar
AngryCat_52750
Icon for Nimbostratus rankNimbostratus
Dec 11, 2013

username AD variable field change

I believe that when we setup a APM login page, the username field is associated with the sAMAccountName field in AD.. is there a way to make that associated with another field like say - userPrincipa...
BIG-IP Access Policy Manager (APM)
design
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Dec 11, 2013

This all depends on how you collect the user credentials on the logon form. If you check the "Split domain from full name" in the logon page properties, then entries with domain\user and user@domain will get automatically split into separate username and domain variables. If, for example. a user's UPN is [email protected], and their sAMAccountName is Simon, then the following would work in the logon form:

simon
domain\simon
[email protected]
1234567890
[email protected]
domain\1234567890

Because any combination will apparently work, it'll be a trick to figure out which is which (sAMAccountName or userPrincipalName), but then you may not have to.