We have CE 2.103.100.8 running on domain-joined Windows Server 2016 Datacenter. Authentication with sAMAccountName works fine from both CE and the MaaS360 portal. However, everyone one uses email to authenticate with most platforms (e.g. computer, M365, MFA, VoIP, NAC, etc). We need to have the same experience here, especially being this is one of the first things a user would do when they onboard, replace a device, etc.
How do we configure CE to acknowledge a different AD attribute as the username? We have tried adjusting mandatory and optional attributes, even the search attribute. We have not found a combination that works.