ISE 1.3 VPN authentication with Email address instead of username

[alex.dersch]

Hello,

i'd like to set up a VPN authentication against Microsoft LDAP Directory.

The user should enters his email address which is stored in the MSFT LDAP attribute mail. How can i configure ISE to look in the attribute mail to find a user instead of the username?

thanks in advanced

Alex

[jan.nielsen · Accepted solution]

You can use the "custom" schema setting in ISE under the external identity/LDAP and change the Subject attribute to "mail" instead of "samAccountName", which is the normal attribute ISE uses for searching for users in the LDAP structure. Then you can chech if it works, by going to the Attributes menu and search for an email address that you know should be there.

[alex.dersch]

Hi Jan, thanks a lot.

alex