No resource token was issued because the user has neither UPN or e-mail claim for shadow account mapping nor group claims ...