SSO shows email address instead of domain name when user authenticates to external exchange server

Users are being recognized correctly by SSO Agent at first login but after they authenticate to external exchange server, the username is the email address.

After the authentication to the external exchange server, the DC Logs may retrieve the email address as Domain Name and so the firewall policies won't be correctly applied.

NetAPI / WMI correctly recognize users with their domain username.

DC Log Subscription and DC Log Polling methods will retrieve the wrong username in cases like this.

Here's how to solve the issue:

• Go to your SSO Agent (Directory Services Connector)
• Configure each of your Domain Controllers to use Server Session for DC instead of DC Log Subscription/DC Log Polling.
  
  

  

• Delete all active users from the SSO Agent and logout all of them from the SonicWall.

Now usernames should be correct even after authenticating to exchange server and firewall policies will be correctly applied.