For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
Feb 03, 2014

Which variables to set in APM to authenticate against Active directory

For a VPE that I have I let the user enter their email address instead of the samaccountname or UPN. I do a look against AD to retrieve both attributes now I need to authenticate the user so I need t...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 03, 2014

Are you by chance querying AD to find the SAM or UPN based on the mail attribute? If so, then you probably shouldn't enable split domain in the logon form.

 

  1. Present user with logon form and accept email address and password
  2. Query AD with mail=%{session.logon.last.username}
  3. Variable (re)assign session.logon.last.username with session.ad.last.attr.sAMAccountName
  4. Pass to AD auth