Remote Access VPN - identity sources- username format

[Cathy_Cheng]

We use Remote Access VPN as one of our identity sources, where usernames are presented in the format username@domain (via SAML authentication). However, LDAP searches require the username (sAMAccountName) format. As a result, Active Directory group and role retrieval fails.

Is there a way to strip the @Domain portion from the username?

[simonemantovani]

Hello

How did you configure the authentication?

In the authentication tab for Remote Access VPN, unde Mulitple Login Option you should be able to set the gateway to use UPN (UserPrincipalName) instead of sAMAccountName; UPN is usually in the format username@domain.

[Cathy_Cheng]

Finally sorted this out by changing the Entra ID side SSO Attributes & Claims.