7

User principle instance has format username/instance@REALM and separate password. According to some sources it's possible to create such principles in MIT Kerberos. Does ActiveDirectory support this Kerberos feature?

olmstad
  • 197
  • 1
  • 6

1 Answers1

8

Other Kerberos implementations may allow multiple UPN's for a given user, but MS AD does not. MSDN Reference

This attribute is an indexed string that is single-valued.

Clayton
  • 4,483
  • 16
  • 24