Override default user attribute

[medykn-git]

Hello, is there a way to override the default lookup attribute, e.g. to use sAMAccountName instead of mail ?

[CybotTM]

Hi @medykn-git, thanks for the question!

It depends on which form you mean:

• The password change form (the main page) already identifies users by their username (sAMAccountName) — the mail attribute isn't used there at all.
• The forgot password flow is the only place where mail is the lookup attribute: the address you enter is searched via (mail=…), and the reset link is sent to that same address. This is currently hard-coded and not configurable.

Supporting a username (sAMAccountName) in the reset form would be technically straightforward — the underlying simple-ldap-go client already provides FindUserBySAMAccountName, and the app would then read the user's mail attribute from the directory to know where to send the reset link. If that's your use case, feel free to open a feature request issue.

Could you share a bit more about your scenario — e.g. do your users typically not know their email address, or are mail attributes not (uniquely) populated in your directory? That helps shape the right solution.

[medykn-git]

Hi @CybotTM,
Thanks for the quick and detailed answer. My use-case is for the forgot password process. We are dealing with several accounts per user and those accounts all have the email address field filled out. The only field that differs among the accounts is the sAMAccountName. That's why I'd like to use the sAMAccountName in the forgot password form instead of or in addition to the mail.
I can open a feature request if you want.
Thanks for your help !

[CybotTM]

Hi,

ok, so you have multiple accounts with the same email address.
So, yes, please open a feature request for this use case.