Correctly identify AD account

Without this change, there is no access to AD info. Also allows SSO.