topic Re: Clarification Authentication for Remote Access VPN in General Topics

Clarification Authentication for Remote Access VPN

RemoteUser — Sun, 26 Apr 2026 07:11:14 GMT

Hi mates,

Hope you’re all doing well!

I have a doubt that came up while testing a task requested by the customer: making the gateway perform authentication lookup based on UPN instead of DN.

I ran some tests by creating a user with a CAPI certificate and then moving the user between different OUs. The authentication still works correctly, which is exactly the behavior I was aiming for.

This was configured on the VPN Client Authentication side, specifically:

VPN Clients > Personal Certificate (Edit) > Fetch username from: UPN
User Directories > LDAP Lookup Type: UPN

I’ve also attached some screenshots for reference.

My question is: since users connect via Remote Access Client, do I also need to configure the authentication method under Mobile Access, or is it not relevant in this scenario?

If anyone could clarify the differences between these two authentication methods, it would be greatly appreciated.

Re: Clarification Authentication for Remote Access VPN

PhoneBoy — Wed, 29 Apr 2026 20:40:51 GMT

The settings in question are only relevant to how the gateway looks up the user information sent by the client.

DN refers to a precise object in the LDAP directory.
UPN is the login name of the user.

Unless you use the Mobile Access portal, you shouldn't need to configure anything there.

Re: Clarification Authentication for Remote Access VPN

RemoteUser — Thu, 30 Apr 2026 06:15:37 GMT

Hi @PhoneBoy thank you, can i ask What is the difference between? If I change from DN to UPN, for example, do both need to be set to UPN?

VPN Clients > Personal Certificate (Edit) > Fetch username from: x
User Directories > LDAP Lookup Type: x

Thanks

Re: Clarification Authentication for Remote Access VPN

PhoneBoy — Thu, 30 Apr 2026 15:13:48 GMT

I would set them both to use this value, yes.
Not exactly sure where "User Directory" is still used (it's a legacy feature).