You can enable or disable this custom claim. If this claim is enabled, it can be set to map an LDAP attribute for this account ...