User Logon Name

The User Logon Name rule is used to define how the cn, userPrincipalName and sAMAccountName LDAP attributes will be defined during user provisioning. 

This rule allows you to specify multiple naming formats to use for scenarios where the user logon name may already be in use by another user. Remember that each user logon must be unique, so be sure to provide additional naming formats to avoid a conflict and failure point.

If required you can use different formats for sAMAccountName and cn (Common Name) as shown below.

Connect to AD will load default naming formats, which are evaluated from the top down during provisioning. You can change each one of these as required by your security policies.

The default naming formats are:

The logon name value that is used during provisioning is available to be used in other mappings via the User.userPrincipalName or User.userPrincipalNamePrefix field.

In this example below the Mail mapping references the User.userPrincipalName field to define the users mail attribute value. 

In this example below the Mail mapping references the User.userPrincipalNamePrefix field to define the users mail attribute value. 

Next User Logon Name Suffix