How to change VIP User Name Attribute from sAMAccountName to userPrincipalName (UPN) in Symantec VIP

Products

• VIP Service

Issue/Introduction

How to change VIP User Name Attribute from sAMAccountName to userPrincipalName (UPN) in Symantec VIP

Resolution

Note : This will change the attribute sent from the VIP Enterprise Gateway as the VIP User ID. For example, users may be logging into the application using their SamAccountName (per the User Store filter), but the VIP User ID sent to the VIP cloud will be the set value. The suggested steps should be carried out during a scheduled maintenance window as user authentication may fail for some users during the process of updating user data in the VIP services. 

 

1. Log in to the VIP Enterprise Gateway configuration console.

2. Click the User Store tab.

3. Edit the user store which you want to change.

4. Click on Search Criteria to verify the current VIP User Name Attribute

5. Change the VIP User Name Attribute from sAMAccountName to userPrincipalName (UPN). 

7.  To verify, click on the Test button to see the VIP User Name as UPN. This is what the username will be updated to in the VIP Cloud. Save the changes.

8.  Perform an LdapSync simulation. The simulation.log will show any changes that will be made during the next LDAP synchronization cycle.

6. To force a full LDAP sync, click Run Once. The VIP User ID for all user objects that satisfy the filter criteria will be updated in the VIP Cloud with the UPN.