Perhaps sone one here has a solution, to quote QUEEN, I'm going slightly mad...
One of our users was renamed from username firstname to username firstname.longlastn (cut off due to length in the pre windows 2000 field) in active directory his email adres was changes from firstname@ourdomain.com to firstname.longlastname@ourdomain.com . All synced well to DUO and he can use DUO for SSTP VPN. However access with DUO the RDP Gateway no longer works for him.
Within the DUO portal he has
username: firstname.longlastn
Username Alias 1 firstname.longlastname@ourdomain.com
Email: firstname.longlastname@ourdomain.com
Yet, when he tries logging in on the RDP Gateway server he gets an error message. In eventviewer we can see:
Error in Duo login for 'locdomain\firstname.longlastn': The username you have entered is not enrolled with Duo Security. Please contact your system administrator.
--
other log entry:
Duo has been configured for UPN username format. Translating from: locdomain\firstname.longlastn
The specified resource type cannot be found in the image file
The following information was included with the event:
Translated account - username: firstname.longlastname@ourdomain.com domain: locdomain.local
