This is how it worked with my installation. My approach is very similar to Matt's, but might show a different option to adapt it to your specific environment. nifi.security.identity.mapping.pattern.dn=^(cn|CN)=([0-9a-zA-Z]+),(.*)$ nifi.security.identity.mapping.value.dn=$2 nifi.security.identity.mapping.transform.dn=LOWER and then in login-identity-providers.xml subsequently <property name="Identity Strategy">USE_DN</property> Thanks,  Heiko ... View more