How to configure Prisma browser to login using UPN instead of Email.

• Prisma browser  login requires the onboarding using Cloud identity engine with SAML authentication.
• The default method of identification is email, but UPN (User Principal Name) is also supported.
• This article provides steps to use UPN instead of Email.

• Prisma Browser 
• Authentication using UPN

1. In CIE (Cloud Identity Engine) > Authentication Type > step 3, username attribute: select either UPN as attribute or username (where the username is selected as UPN on the IDP (identity provider) side). 

2. In the Prisma Browser onboarding, Change the Identification method to UPN.

3. Once UPN is selected, it is automatically populated into the Email field on the Users page, replacing the traditional Email attribute.
4. Once the changes are made, Wait for 10 to 15 minutes and then have the use login using UPN. 

Note:

• Prisma Browser  can only accept a valid email format.
• If the UPN value isn't an email format, Prisma Browser will skip the user credentials.
• This means if the UPN on the IDP side is not in valid email format, UPN cannot be used for Prisma Browser login.