Portal can't find uses Email Address and Full Name from AD

Question

We set Portal for ArcGIS to use Integrated Windows Authentication but we can not add users because the Identity Store does not find the users Email Address and Full Name, which is included in the AD record.  When I query information on a user  it just shows the User ID and what is typed in the description field but the Email and Full Name information is blank.

DavePowers · Answer

Jeff,

Thanks for the information, I will look into it this morning and let you know what I find.

Dave Powers GISP

IT Services Manager – GIS Division

Shasta County Information Technology

Redding, CA  96001

(530) 225-5257

dpowers@co.shasta.ca.us<mailto:dpowers@co.shasta.ca.us>

JeffSmith · Answer

I wonder if the attributes used for your email address and full name in Active Directory are different.  If you copy and paste the example from the help doc, the "userFullnameAttribute" is set to "cn" and the "userEmailAttribute" is set to "mail".  If these are different in your environment, that could explain why they are coming back blank.  An easy utility to use to check this is the SysInternals ADExplorer.  Just query for your username and it will returns all of the attributes.

DavePowers · Answer

Sorry for the delay, I was in a meeting.

It was a service account that I tried first which had the password set to never expire, then I tried an AD account that I knew had elevated abilities in AD with the same results.  With both users the Portal Identity Store is able to pull the User ID and the Description but does not bring back the email address or Full Name.  Since the Identify Store uses the email address to help the user restore their password it will not let you add the user without it.