We are trying to use Duo with our VMware Horizon View system.
Our users login with their UPN, always in the email address format.
Our DUO account only has the users’ CN.
So, following the auth proxy docs, I configured the
username_attribute to be the “sAMAccountName” and
at_attribute field to be UPN.
Users authenticate to AD via the proxy, but it ALWAYS sends the UPN to Duo. It seems to be a bug, ignoring the “username_attribute” entry.
NOTE - Our UPN and CNs are different. Ex. “jdoe@—.---” and “jdo123”.