vRA 8.x - BUG in Projects

[bdamian]

Hi all, I've found a serious bug in Projects.

I have two domains, both added to vRA:

• companydomain
• labdomain

I have an account in each domain:

• dbacalov@companydomain
• dbacalov@labdomain

The accounts have different mail, sn, givenName.

When I edit a project and add my account, it shows both accounts:

I cannot add both accounts to the project, and no matter which account I select, always adds the same account (in my case the lab account).

I've noticed that this is the call to the API when I add users to a project:

{
  "modify": [
    {
      "email": "dbacalov",
      "type": "user",
      "role": "administrator"
    }
  ],
  "remove": []
}

And, as you can see, the field "email" doesn't have the mail of the account, nor the principalName of the account, it uses the sAMAccount (which is the same in both domains). So, vRA takes the first domain and assumes that is the correct one.

The attribute mapping of the domains have the default configuration:

I think that this is a possible scenario in big companies with multiple domains.