JSzinger Posted October 13, 2022 Share Posted October 13, 2022 We need to send our users email addresses to an SECP profile from AD using LDAP. It is mostly working fine but we have a separate domain for our Canadian users. I have added the second LDAP server but our Canadian users are not having the email address sent to the certs (they still see %email% in the certs in the keychain) Do I need to somehow specify which LDAP instance to pull the information from? Link to comment Share on other sites More sharing options...
Pierre-Nicolas Posted October 17, 2022 Share Posted October 17, 2022 Currently, only one LDAP server can be used for authentication - the one you select in preferences. When you enroll a device, the only information captured will be the username. Having multiple LDAP servers / enrollment authentication is not possible yet, this is a feature request (this has been brought a few times during last US training day meeting). A possible workaround would be to go via custom field. Thinking quick, but I'd add a custom field to indicate which server to contact, and have a script which would read server, user name, and then populate another customer field with mail based on LDAP query - another option is to go with export / import but it's less automated. 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now