Reference Guide
...
User Management
LDAP/Active Directory Integrat...
Multi-Domain for AD Users
Every Active Directory user has a unique ID, and any configuration made for the user is bound with this unique ID. Therefore, Object GUID information from the LDAP is located in a column that the user accounts page.
ObjectGUID attribute in User Accounts

When a username changes on the LDAP, it is also changed in Kron PAMt according to ObjectGUID. Therefore, Audit logs, Activity Logs, and Session Logs can be followed easily in case the username changes on the source. Username changes are available on the user group properties.
To see user information changes on the LDAP:
- Navigate to Users > Choose the Group of Users.
- Then Users will be listed.
- Click the green arrow button on the User.
- Click on the User History.
If more than one domain exists on Kron PAM, users can select a domain on the WEB GUI page by configuration.
- Navigate to System Config Manager.
- Set the show.sc.portal.login.domain as true.
- Save this property.
Select the domain for AD users