XGS Not Reading Attributes from AD

Hi JeffCooper

Thank you for reaching out to the community, Please configure the parameter as per the below link : 

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/StartupHelp/AuthenticationConfigureActiveDirectory/index.html#add-an-active-directory-server 

Thanks and Regards

Hello Bharat,

the link you gave is not answering his question.

He obseves the same thing as me, when syncing ADS accounts: the field "Email" is always blank as in my example below:

Hello Bharat,

the link you gave is not answering his question.

He obseves the same thing as me, when syncing ADS accounts: the field "Email" is always blank as in my example below:

Hi  jprusch  

AD integration with Sophos XG, Email Address Attribute: mail, by default. If you need to use other AD attributes for Email, please refer to Microsoft KBA: https://docs.microsoft.com/en-us/windows/win32/adschema/attributes-all 

Thanks and Regards

"mail" works for me in dozens of environments.

OK, when will this be filled, when will it be refreshed?

Hello,

Adding to this, beside the Display name attribute and the email address attribute set in the XG Firewall for the Server, in your DC, you need to also fill out the email filed for the General information of the user.

When the user authenticates to the Firewall then the Firewall will fill in the email field or if it hasn't been set, then once you set it in the DC, and the user authenticates again then it’ll get populated.

Regards,