Is it possible for AWX to map LDAP users to a different username based on domain?

Get Help
,
1

In AWX’s LDAP settings, one can point to multiple different LDAP authorities. Let’s say you have domain1 and domain2, and you have a user named user. If user logs in via domain1 creds, they get a local account automatically created within AWX named user. If they log in with the same username via domain2 creds, they still seem to utilize the local account automatically created within AWX named user.

Is there any way to alter the name of the local AWX username based off the LDAP service they logged in via? I searched but couldn’t find anything and AI halucinated a solution that didn’t work for me (editing “LDAP User Attribute Map” to map “username”).

2

May have found a workaround in keying off userPrincipalName instead of sAMAccount name in “LDAP user search” config. But curious if there is a solution to my original question.

3

Since AWX LDAP Authentication is using just django-auth-ldap, you may read Django Authentication Using LDAP for more information. According the documentation there, and as far as I understand, no, there seems to be no way out-of-box. Using an other key and as already mentioned should be the way to go.