How to create Active Directory Accounts without the domain being specified in the UPN?
search cancel

How to create Active Directory Accounts without the domain being specified in the UPN?

book

Article ID: 9379

calendar_today

Updated On:

Products

CA Directory CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On CA Security Command Center CA Data Protection (DataMinder) CA User Activity Reporting

Issue/Introduction

How to create Active Directory Accounts without the domain being specified in the UPN.

Example:

Active Directory Accounts are being created with an UPN of '<UserName>@domain.company.com' 
However, you would like the account to be created with a UPN of '<UserName>@company.com'

Environment

Release:
Component: IDMGR

Resolution

To accomplish this you need to expose the suffixes for selection in the Active Directory Account Template. 
To do this:

  1. Open the Active Directory Template.

  2. Put the suffix directly in the Account Tab of the template ('User Logon Name'), such as %AC%@yourcompany.com 
    This overwrites the default UPN Suffix in AD.

  3. Click Apply.

Additional Information

The above instructions can be achieved from both the Identity Manager User Console or by using the Provisioning Manager.