What SAML attribute does Firepower use as "username" in RADIUS AuthZ?

[DannyDulin]

RAVPN connection profiles using Azure MFA for Authentication.

We are using ISE for Authorization.

When the FTD receives the SAML response from Azure MFA that includes multiple attributes in the claim, which attribute does FTD send to ISE as "username" in the RADIUS authorization request?

Any help would be greately appreciated.

[Greg Gibbs]

When redirected to the MS login portal, you login using the UserPrincipalName of the user account in Entra ID. This is the attribute that the FTD sends to ISE for identity and the UPN is the only attribute ISE can use to perform REST ID authorization lookups against Entra ID for user groups/attributes.