topic Re: Customise DynamicID LDAP search query in SASE and Remote Access

Customise DynamicID LDAP search query

David_Herselman — Fri, 07 Dec 2018 13:09:27 GMT

We successfully configured DynamicID to make use of two factor authentication via SMS. The number is retrieved from the 'Mobile' field in Active Directory but our client has a dilemma.

Not all staff have company issued mobiles and the client has automation scripts in place to build staff email signatures using information in Active Directory. They do not want to expose user's private mobile numbers and have asked us to configure DynamicID to reference an alternative field in Active Directory, such as the Pager field.

Documentation details the following

Could someone be so kind as to advise whether or not we can configure this by editing a file on the security gateway?

The referenced location does not provide the ability to customise which LDAP field is queries for this information:

Regards

David Herselman

Re: Customise DynamicID LDAP search query

David_Herselman — Fri, 07 Dec 2018 14:19:45 GMT

Looks like this was already asked in Change source for LDAP phone info for DynamicID

Solution is documented in Configuring Two-Factor Authentication with DynamicID to send the OTP via email fails for Active Directory users

Re: Customise DynamicID LDAP search query

henry_shih — Sat, 10 Jul 2021 15:42:39 GMT

We are selecting a successful SMS provider. Could you tell me who is your SMS provider?