KNOWLEDGE BASE

Importing UPN Prefix as Username in Non-Standard Scenarios with Active Directory


Published: 11 May 2022
Last Modified Date: 08 Jul 2022

Question

How can I import users into Active Directory using the UPN prefix as the username where user identities have been constructed in non-standard ways?

Environment

Tableau Server
Windows
Active Directory

Answer

The user name that Tableau Server will import into the identity store will be the sAMAccountName value unless one of the following is true:

  • If the UPN prefix of the user specified is greater than 20 characters, and the search string matches the full UPN, and is entered with the Windows login format (domain\UPN).

    Consider a user with the following Active Directory attributes:

    • UPN: jsmith123456789012345@example.lan
    • sAMAccountName: jsmith

    To import this user so that the UPN prefix (jsmith123456789012345) is used as the Tableau Server username, specify this search string when importing the user: example.lan\jsmith123456789012345@example.lan

    (To import this user so that sAMAccountName is used, simply specify jsmith when importing).

  • If the user name you specify includes an @symbol in the UPN prefix (jsmith@domain) and the search string you enter is either in the Windows domain login format (example.lan\jsmith@domain) or is the full UPN.

    Consider a user with the following Active Directory attributes:

    • UPN: jsmith@domain@example.lan (in this case, the UPN prefix is jsmith@domain and the UPN suffix is example.lan)
    • sAMAccountName: jsmith

    To import this user so that the UPN prefix (jsmith@domain) is used as the Tableau Server username, specify either one of the following search strings when importing the user:

    • example.lan\jsmith@domain
    • jsmith@domain@example.lan

    (To import this user so that sAMAccountName is used, simply specify jsmith when importing).

If user names were inadvertently imported using UPN names, you can delete the accounts in Tableau Server and then reimport those accounts using the sAMAccountName value for the user name, as shown in User logon name (pre-Windows 2000) in the Windows Active Directory Users and Computers administrative console.

In all cases, the Tableau Server Users page will present user names with the prefix of the UPN only. The full UPN is not displayed in the Tableau Server Users page.

Did this article resolve the issue?