Is there a way to eliminate the need for SSL-VPN users authenticating via AD to enter the Domain field before the username ?

[dcowan]

I am using a PA-2050 and OS 4.0.5 (plans to upgrade shortly to 4.0.8)  with NetConnect.  We recently started using AD for authentication and it's working very well with one exception:  the users must enter the AD domain name in with their username.  Ex:   domain\username

Is there a way to remove the need to enter the domain name if you are only using one flat AD domain?

[bmorrison]

Are you using Kerberos or LDAP Authentication?

For VPN Authentication, I typically use Kerberos where you can configure the Realm and Domain, enabling the user to only need to input their username.

[dcowan]

We are using LDAP with an authenication profile.   And in addition will be adding another domain to the network soon, thus complicating the situation.

[jnguyen]

in the ldap server profile under device --> server profiles --> ldap did you enter in the domain in the domain field?

example if your domain is abc.com. users are currently logging in via abc\user. you will need to enter abc in the domain field.