User creation from Portal creates a user account with email addresse name (containing blanks) ?

Question

Hi, 
 i migrated from UTM to XG this week and i have some problems with AD integration. I imported the AD Groups Mitarbeiter and all is fine. 
 I know that a user can logon to the user portal even if the user does not exist. SG 17.5 get&acute;s the Data from AD and creates the user. 
 My mail is in this format surname.name@company.de and the domain is dc=company,dc=local,dc=de 
 If i logon with mit NetBios account surname name a new user is created. 
 User name "surname name@company.local.de" There is a bank inside the username! 
 Descriptive name is "surname name@company.local.de" 
 Is the domain behind the name normal or by design? I would have expected that the surname and name will be used for user creation. 
 How can i autofill the Email setting for the new user? 
 Thanks 
 J&uuml;rgen

LuCar Toni · Answer

I cannot clearly tell you the root cause for your issue, but i can explain you, how the Access_server( XG aua) works. 
 If you setup a authentication server (AD) in XG, you have to define the netbios and the FQDN. 
 Lets build an example. Domain FQDN: test.local, Netbios=test Usersyntax: surname.name 
 You simply authenticate to XG with any method (like user portal) with surname.name. 
 XG will take this and verify this account to AD. It simply paste the FQDN to the request: surname.name@test.local And the AD will tell you: Yes/No. Afterwards, the client will be authenticated. XG uses the SAMAccountname. 
 If you use surname.name@test.local, it will work, because the access_server simply use the full string to the AD. 
 This is build for Multi AD support. 
 
 Now the best part: Which Field in AD uses XG to get the attribute "Email"?

This is the attribute field in AD. You can verify it by expanding the AD view. 
 https://social.technet.microsoft.com/Forums/office/en-US/2c6e4e02-b942-453a-a09b-bbc5378d3db1/ad-custom-field-view-gtgt-advanced-features-attribute-editor?forum=winserverDS 
 
 You can motify it and let XG update the emails. Maybe this field (default mail) is not correct in your ad?

Next point is: Yes the Domain in your account name is normal and by designed. It is to create a multi ad Environment. But as mentioned early, you do not have to use it. All authentication methods works fine without using the Domain FQDN. 
 
 Hope this helps.