Hello,
Currently we have anyconnect setup on our 5510asa. It is setup using AAA and configured for an LDAP server using sAMAccountName as the authentication for users to to log in. Users have an @domain1 username and log in using the first part of their domain name ex "userx" and then their password
We are doing a company name change and rather than destroy the entire network, we just added in another alternate name suffix into active directory so that users could have a @domain2 username. We want to shut off the ability in ad for users to log into systems with their @domain1 username and force them to use the @domain2 username.
However when we made that change in ad it broke the ability for anyconnect to establish a connection, when a user put their password in it wouldn't work until we switched back the ability in ad for users to use the old domain as a login.
Is there a way we can configure the asa to look at the userPrinciplename and not the sAMAccount name so that a user can log in how they do now but also give us the ability to disable the capability to log into windows using their old usernames without breaking the vpn connection.
Any help is greatly appreciated.
