Glenda, Ralph Thomas
Thank you very much for your answers, and I had noticed the right to consult attribute, however, I have error recovery data element.
You can clarify me, if the appropriate value for the "account name" attribute in this data element is equivalent to the value on AD cn or sAMAccountname value, in this environment of AD both values are different.
CN contains the long name of identity (display name) and sAMAccountname contains the short name (ex: fcontreras)
CN = Fernando Mauricio Contreras Godoy
SAMAccountName = fcontreras
In my test, I'm having the %USER_ID% value, in this case is equivalent to sAMAccountname.
Again thank you very much to both for your answers.