I have a SSO authentication question. In my Active Directory, my UPN suffix login and my SAM account do not have the sames domains. Example : UPN : dominique.test@abc.com Sam account : domtest@local.lan On the VM portal, I am able to connect with dominique.test@abc.com but not with domtest@local.lan (I have the following message:server_error: Cannot resolve principal 'domtest@local.lan' If I connect to the VM PORTAL with dominique.test@abc.com, when I click on "RDP Console" to get the link, the login of the RDP is dominique.test@local.lan. So I have to manually change the login to dominique.test@abc.com. Is it possible to use the Sam account domtes@local.lan instead of the UPN ? if not, is it possible to adjust the consol.rdp configuration and include the domain abc.com instead of local.lan ? In research I found this, but I don't have access. How to authenticate with Active directory when UPN suffix and Forest Name are different using AAA LDAP extension - Red Hat C https://access.redhat.com/solutions/2332561 Thank you