You can enable or disable this UPN claim. If this claim is enabled, it can be set to map an LDAP attribute for this account ...