Platzhalter %_USERNAME_% (Exchange Login) wird nicht über Azure AD Sync gefüllt, SCEP geht nicht

Hallo zusammen,

wir haben vor 2 Wochen die Migration von Sophos Mobile on-prem zu Central gestartet.

Hier will ich nur noch den Azure AD Sync nutzen, allerdings bleibt das Feld "Echange-Login" leer, was den Platzhalter %_USERNAME_% füllt.

Was problematisch ist, da wir unser WLAN über SCEP Sever machen und hier will er in der Config zwingend CN=%_USERNAME_%.

Welches Feld wird hier für das Exchange-Login Feld im Azure abgefragt?

Vielen Dank.

Edit tags
[edited by: GlennSen at 4:31 AM (GMT -7) on 2 Apr 2023]

Top Replies

Jan-Philipp Lechner 2 months ago in reply to Gladys +1 verified

Hi Gladys , Sophos Mobile is not connected to Azure AD, Sophos Central is connected to Azure AD. Set up synchronization with Azure AD Now I've tested the AD Sync Installer and the Exchange Login…

0 Gladys 2 months ago

Hi Jan-Philipp Lechner ,

Thank you for reaching out to our Community Forum. Has the Sophos Mobile been connected to the Azure AD as per the documentation below?
- Sophos Mobile: Connect to Azure Active Directory

Gladys Reyes
Global Community Support Engineer
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Mildred Eure 2 months ago in reply to Gladys

What is the purpose of %USERNAME% placeholder?What is the expected behavior of SCEP?Have you checked the Azure AD Sync logs to see if there are any errors or warnings related to this issue?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
+1 Jan-Philipp Lechner 2 months ago in reply to Gladys

Hi Gladys ,

Sophos Mobile is not connected to Azure AD, Sophos Central is connected to Azure AD.

Set up synchronization with Azure AD

Now I've tested the AD Sync Installer and the Exchange Login field is filled.

Set up synchronization with Active Directory

It would be nice if that was in the documentation.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Reject Answer

Cancel
0 Jan-Philipp Lechner 2 months ago in reply to Mildred Eure

The purpose is the configuration in the SCEP profile, see screenshot above.

This is a mandatory field, either with username or device serial number. We want the users.

After the Exchange Login field is now filled with the AD Sync Installer, it works.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel