it might be too late but I'll give a shoot in "userDnTemplate where sAMAccountName is referred (sAMAccountName={0},ou=Accounts,...)" if you on AD check if your users DN start with "CN" not sAMAccount, as sAMAccount is just the login name.
... View more
