Cisco ASA DAP Username Match.

[ekatso]

We have DAP based on Cisco Username to allow different access but if users put a suffix they are still authenticated BUT the DAP is not matches anymore.

example:

user1

user1@domain.com

Any Ideas on how to do a regex on Usernames?????

[tvotna]

In the very past there was a "group-delimeter" and "strip-group" ASA CLI which was used for Cisco IPSec Client to strip suffix before passing the username to AAA. Not sure if this works for AnyConnect.

For DAP you can achieve everything you want with Lua: http://www.lua.org/docs.html

[ccieexpert]

can you show your dap policy ? are you matching on username or username@domain.com ?

[MHM Cisco World]

You add two username in one DAP?

Can you share 

Debug dap trace 255

MHM