https://live.paloaltonetworks.com/t5/globalprotect-discussions/azure-ad-globalprotect-clientless-portal-saml-domain-issue/m-p/415664#M1471 <P>Hi All, I am able to authenticate users against the portal with SAML and Azure AD all good. Since I can't pull groups from Azure I'm using LDAP for the portal and policies also working. The issue is that the user from Azure is coming down to the firewall as doman.local\user while on prem LDAP is just domain\user. Any way to drop the .local at the firewall or has it to be done in Azure?&nbsp; and if Azure how <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span>&nbsp; Thanks</P> Mon, 28 Jun 2021 18:06:05 GMT Pasquale01 2021-06-28T18:06:05Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/azure-ad-globalprotect-clientless-portal-saml-domain-issue/m-p/415664#M1471 <P>Hi All, I am able to authenticate users against the portal with SAML and Azure AD all good. Since I can't pull groups from Azure I'm using LDAP for the portal and policies also working. The issue is that the user from Azure is coming down to the firewall as doman.local\user while on prem LDAP is just domain\user. Any way to drop the .local at the firewall or has it to be done in Azure?&nbsp; and if Azure how <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span>&nbsp; Thanks</P> Mon, 28 Jun 2021 18:06:05 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/azure-ad-globalprotect-clientless-portal-saml-domain-issue/m-p/415664#M1471 Pasquale01 2021-06-28T18:06:05Z