Terminating Endpoint Connect with user certificate (CN)

[CP-Shark]

Hi guys,

I want to implement the Endpoint Connect  VPN solution using Remote Access VPN Blade provided by Harmony.
It is working fine if I am using the Fully distinguished name (FQDN) in the certificate (MS Enterprise PKI):

But with this configuration I have the issue that when a user moves to another organisation unit in Active Directory the VPN is not connecting anymore and this is based on the configuration totally fine and correct. But in an environment with 5000+ users this is not handable so I want to use common name or email address. The change in the certificate template is not the problem, but if I change the Authentications settings on the gateway like this (or Subject Alternative Name.Email) 

the VPN is not connecting anymore with error -> User CN=Common Name unknown.

I am sure that this is not a unique requirement but I don´t now what I need to change to get this working.

Cheers,
Olli

[CP-Shark]

Any ideas on this issue?

[PhoneBoy]

Have you opened a TAC case?

[cenes]

Any updates on this?

Thanks.

[_Val_]

Most probably no, considering the post is from year 2022.