Can you report on LDAP 'displayName' attribute instead of cn/sAMAccountName?

[neonbit]

I was at a customer site today and noticed that all their usernames were employee numbers (like M5542, F34232 etc). When they ran reports for top users, it would only show the employee numbers (cn or sAMAccountName),  but not their actual names (displayname), which is expected.

I've been testing this in my lab to see if there's any way to get either FSSO to change the LDAP attribute it records for the user, or to get FortiAnalyzer to do an LDAP lookup to display the LDAP attribute 'displayname' when running a report. For example, user M5542 has a displayname of 'John Doe'.

Any ideas of how we could displaying 'John Doe' in the reports instead of M5542?