In Microsoft Active Directory, the login ID is stored in the attribute sAMAccountName. For example, a user with login [email protected], displays as bob.kent or testdomain\bob.kent.

In Microsoft Active Directory, the full name of the user is stored in the attribute displayName.  For example, the user with login [email protected], displays as Bob Kent.

 

The field to capture the Display name or Full username is:

 x-ldap-attribute(displayName)

 As the term 'LDAP' is included in the field name, it can only be used for users authenticating using LDAP;  IWA is not supported.