RADIUS Authentication with AD UPN or AD Sam Account Name
Jun 12, 2025
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
This article provides information on the necessary steps that will allow users to authenticate in the RADIUS application with both AD User Principle Name and SamAccountName.
Applies To
- RADIUS
- Active Directory
Solution
To configure user log-in to an Okta RADIUS application to use both the AD user principal name(username@active-directory-domain) and SamAccountName (username), the RADIUS app requires the following two configuration changes.
- The Enable UPN or SAM Account Name Login option from the RADIUS application > Authentication > Advanced RADIUS Settings > Authentication to be enabled.
- The Application username format for the RADIUS application must be set to AD user principal name. NOTE: If users are already assigned to the RADIUS application after making the change after changing the Application username format, select the Update now button.
NOTE: The SAM account name must have the same prefix as the UPN for it to be used successfully.
