Welcome to the #dominoforever Product Ideas Lab! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated jointly by the IBM & HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino page.


Allow SAML and ADFS to use other field besides the Email Adress for mapping

Not all users in an AD is assigned a unique  e-mail address, some share the same mailbox with others. Nearly always these AD user accounts have a unique username that could be used instead for the mapping of the AD user to the corresponding user account in the Domino directory and thus allowing them the proper validation and access to the Domino application.

  • Avatar32.5fb70cce7410889e661286fd7f1897de Guest
  • Jan 22 2019
  • Attach files
  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    22 Jan 21:31

    Absolutely! Yes please! I have customers who are using other names already.
    I have a customer with an unique company ID.
    The IdP is using LDAP and that attribute is their primary name there as well.

    The mapping worked because that entry is unique and in the fullname field of the user.
    But it's unsupported!

    Using that attribute was the only common name in all directories and it would have been a show-stopper.

    I have multiple customers with this requirement. And I don't see why it should be complicated to support it when the name is in the fullname field or any other field that is in the same namelookup.

     

    [ Daniel Nashed / http://blog.nashcom.de ]