On Tue, 2 Feb 2016, Stephen Meier wrote:

Good Morning all,

Does anyone use both or either the UPN or the SamaccountName for their users to login?

Sure. We do something similar against our LDAP service. Search against both attributes, like this:

  <property name="filter" value="(|(uid=%u)(eduPersonPrincipalName=%u))" />

in your case:

  <property name="filter" value="(|(samaccountname=%u)(userprincipalname=%u))" 
/>


Always make sure that there will only be one match though. For example, don't search for samaccountname on a global catalog server where more than one domain may have the same samaccountname.

        Andy

Reply via email to