FMC with FTD - VPN with AD Auth using email

[Tibor M]

Hi,

On ASA we used "userPrincipalName" attribute as username for VPN as we wanted everybody use email address as "samaccountname" is too short for some users. How this can be achieved on FTD managed by FMC? (both version 7.4)

Thanks

[tvotna]

This is not possible from the GUI, because the following bug hasn't been fixed: CSCvi07018. This might be possible to achieve with FlexConfig.

[Tibor M]

thanks for the tip. any suggestion how to do it? never used flexconfig, I'm new to FMC/FTD.

but if this guide is correct, edit of aaa-server is prohibited.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/flex-config.html?bookSearch=true

[tvotna]

I didn't try myself.