Breadcrumbs

UPN check

Pre-requisite: RA certificate caching must be enabled.

  1. Logon as Domain administrator

  2. Start Active Directory Users and computers

  3. Make sure in View menu you have Advanced Features enabled:

    image-20230323-172108.png

  4. Search for user you are using for authentication:

    image-20230323-172120.png
    Make a right-click and select Name Mappings


  5. Add user´s certificate (found on previous chapter Verify certificate Subject Alt Name (SAN), point 3)

    image-20230323-172147.png


  6. Try to authenticate. If this helps resolve the issue, problem is on correct mapping of certificate to AD account.

  7. Remove explicit mapping. This is only for testing.