We have a public domain wich receives e-mails: foo.org.br
And a internal Active Directory domain: intranet.foo
In AD users have account name "email@example.com", and an attribute mail containing firstname.lastname@example.org.
We need to make auth works using their mails, and not their account names on AD. How can we be able to make it possible?