Thread:Extension talk:LDAP Authentication/Customizing displayName/reply (2)

BTW, it is kind of odd to change a sAMAccountName to something like an ID. Are you being forced to do this? Won't people have a hard time remembering a number to log in with?

I've seen implementations that add ID numbers to users, but it is usually done in the displayName, and the userPrincipalName field is changed to "ID@EXAMPLE.DOMAIN.COM". This allows people to log in with a familiar name, while still being able to use the unique ID for things like smart cards across organizations, or other distributed systems.