We have a public domain wich receives e-mails: foo.org.br
And a internal Active Directory domain: intranet.foo
In AD users have account name "firstname.lastname@example.org", and an attribute mail containing email@example.com.
We need to make auth works using their mails, and not their account names on AD. How can we be able to make it possible?