Suffix not appending to REMOTE_USER variable for SSO

I have also tried mod_authnz_sspi with the exact same results.

Hmm, okay I manually modified the REMOTE_USER variable and it still didn’t work. It looks like the plugin isn’t filling in / sending the sAMAccountName or userPrincipalName when trying to login via SSO, but it does if I type in the login and password.

I guess I’m stuck. I don’t know what/if I’m missing a configuration setting or if something needs to be done on the AD side of the house to get this to work?

Please enable the debug log for further investigations.

You don need to omit the NETBIOS name from the REMOTE_USER variable. As soon as you have configured the NETBIOS name in NADI, the authentication will look up that profile by extracting the NETBIOS name from the REMOTE_USER variable.

It isn’t letting me configure the Netbios name in NADI. When I looked that up it says it should be detecting it automatically now?

After you have connected your NADI instance with your Active Directory, the NETBIOS name of your domain will be printed out on your “Environment” tab in NADI (https://active-directory-wp.com/docs/Configuration/Environment.html).
You can use the “Account suffix” option (https://active-directory-wp.com/docs/Configuration/User.html) to strip the NETBIOS name and then append the suffix during authentication.
Please note that there is no technically correlation between your sAMAccountName and your userPrincipalName, see https://active-directory-wp.com/docs/Technical_details/Active_Directory_internals/Users.html.