---
title: "Active Directory user name resolution"
slug: "oas-pg-active-directory-user-name-resolution-3-28"
updated: 2025-07-04T10:04:29Z
published: 2025-07-07T13:58:21Z
canonical: "docs.onespan.com/oas-pg-active-directory-user-name-resolution-3-28"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Active Directory user name resolution

For the authentication of Active Directory users, there are a few ways to provide user ID and domain details when logging in:

- NT4-style domain qualification in front of the SAM account name, e.g. DOMAIN\userid

This logon format requires the creation of an alternative domain suffix via Administration Web Interface. For more information about domain suffixes, see [Alternative UPN suffixes](/sec/docs/oas-pg-upn-suffixes-3-28).
- User principal name (UPN), e.g. userid@domain
- UPN with domain suffix, e.g. userid@alternative.domainsuffix

This logon format requires the creation of an alternative domain suffix via Administration Web Interface. For more information about domain suffixes, see [Alternative UPN suffixes](/sec/docs/oas-pg-upn-suffixes-3-28).

If the user account corresponds to a Windows user account, Active Directory user name resolution can be used to support these logon formats. This resolution mechanism is a platform-independent alternative to Windows user name resolution for Active Directory users (see [Windows user name resolution](/sec/docs/oas-pg-windows-user-name-resolution-3-28)). It can be used if OneSpan Authentication Server is installed on a server that is either not a member server of the Windows domain or running a Linux operating system.

UPN and SAM account name will be translated for Active Directory users. The following prerequisites for using this feature apply:

- Active Directory user name resolution is enabled.
- Windows user name resolution is disabled or does not exist.
- The back-end system is Active Directory or Global Catalog.

For more information about user name resolution in OneSpan Authentication Server, refer to the OneSpan Authentication Server Administrator Guide.