You can specify an incoming group and map it to a single user principal name (UPN) value. Mapping groups to UPNs will override ...