Twocanoes Software, Inc

dup. fixed and closing.

Any more information? How would this be allowed / disallowed? Via MDM?

why not just use SAP Privileges? So you have one less menu item?

So the "Full Name OIDC Mapping" would be mapped to a AD account attribute? That would be easy but the name would be incorrect (probably should be something like Full...

reused map_firstname, map_lastname, map_fullname, map_username from OIDC. Works the same if you put in AD attributes instead of claims.

userDisplayName is set to displayName from LDAP: var userDisplayName = ldapResult["displayName"] ?? "" @davelebbing can you test and see if it works for you?

I believe this was fixed with the other map_username issue. Please verify and close if working.

i think i found the issue. Please test in 7142 or later.

can this be done with the override script? There is a group called DenyLoginUnlessGroupMember. You have the override script return what users are allowed to log into that machine based...

I need to understand this better before i implement it. please send a message to [email protected] to set up a meeting so we can discuss.