XGS Not Reading Attributes from AD

Hi JeffCooper

Thank you for reaching out to the community, Please configure the parameter as per the below link : 

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/StartupHelp/AuthenticationConfigureActiveDirectory/index.html#add-an-active-directory-server 

Thanks and Regards

Hello Bharat,

the link you gave is not answering his question.

He obseves the same thing as me, when syncing ADS accounts: the field "Email" is always blank as in my example below:

Hi  jprusch  

AD integration with Sophos XG, Email Address Attribute: mail, by default. If you need to use other AD attributes for Email, please refer to Microsoft KBA: https://docs.microsoft.com/en-us/windows/win32/adschema/attributes-all 

Thanks and Regards

"mail" works for me in dozens of environments.

OK, when will this be filled, when will it be refreshed?

Hello,

Adding to this, beside the Display name attribute and the email address attribute set in the XG Firewall for the Server, in your DC, you need to also fill out the email filed for the General information of the user.

When the user authenticates to the Firewall then the Firewall will fill in the email field or if it hasn't been set, then once you set it in the DC, and the user authenticates again then it’ll get populated.

Regards,

Thank you all for the helpful info!  It was two different issues, both of which were my fault entirely so my apologies for the wild goose chase(s).

The mail attribute wasn't populating because I was using a test server and neglected to set values for this attribute in my test accounts. Once I put an address in there it worked.

displayName does work. It looks as though the name at the top of the user portal is stuck as "usename@domain.local" regardless what the Display Name is. When viewing in the list of users, or looking at the user's details on the user page, the full names are there.

Thanks,

Jeff