How to create Active Directory Accounts without the domain being specified in the UPN?

Products

• CA Directory
• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On
• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

How to create Active Directory Accounts without the domain being specified in the UPN.

Example:

Active Directory Accounts are being created with an UPN of '<UserName>@domain.company.com' 
However, you would like the account to be created with a UPN of '<UserName>@company.com'

Environment

Release:
Component: IDMGR

Resolution

To accomplish this you need to expose the suffixes for selection in the Active Directory Account Template. 
To do this:

1. Open the Active Directory Template.
   
   
2. Put the suffix directly in the Account Tab of the template ('User Logon Name'), such as [e-mail] 
   This overwrites the default UPN Suffix in AD.
   
   
3. Click Apply.

Additional Information

The above instructions can be achieved from both the Identity Manager User Console or by using the Provisioning Manager.