User cannot use the Active Directory authentication option through RSA VIA L&G.  Error: name is not in dn format

User is not able to use the Active Directory authentication option through RSA VIA L&G.

 Error: name is not in dn format

Version: 7.0.5

All users are able to log in with AD credentials (as far as I know).

All settings match other users.

Testing from inside the collector is successful.

721 WARN (default task-284) [com.aveksa.gui.core.ACMLoginLogout] name is not in dn format
javax.naming.InvalidNameException: Invalid name: {SAM account}

Any thoughts?

-Shlomo