Security

last person joined: 18 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

sponsor_email attribute from AD account information

This thread has been viewed 1 times

  • 1.  sponsor_email attribute from AD account information

    Posted Jun 27, 2017 03:25 PM

    I have LDAP sponsor lookups working, but this customer does not store the users email address in AD (they use a 3rd party mail server, not exchange).
    There is nothing in the “mail” attribute, and their email address doesn’t match the UPN.  Example:

    Email address: john.smith@externaldomain.com (not stored anywhere in AD)

    AD attributes:
    UPN: jsmith@internaldom.local
    Givenname: John
    SN: Smith

    My current attribute mapping looks like:
    sponsor_name | displayName
    sponsor_email | mail

    Is there any way you can think of, to build an attribute mapping to manually combine givenname + . + sn + externaldomain.com, and map it to sponsor_email?



  • 2.  RE: sponsor_email attribute from AD account information

    EMPLOYEE
    Posted Jun 27, 2017 03:30 PM

    No, I don't think this is possible in this context.


    The mail field is not exclusively for use with Exchange. Why can't they populate emails into AD? It's a basic PowerShell or Python script.