New CPPM setup here... just kicking tires.
In our domain UPNs can be easily stripped to produce the base username. So we can use either the Service username stripping rules, or change the filter to query both samlAccountName and userPrincipleName.
That allows users to log into a Guest Operator Application service whether they type just their username or (what they understand to be) their email address.
CPPM will adjust the Authentication:Username attribute to contain only their base username. However, the top level "Username" attribute seems to keep the UPN when the UPN is used. Most critically, this is the value used to determine which devices an operator can see under a profile that has the "Only show accounts createdby the operator" option selected.
So the users would see one set of devices if they log in by base username, and another set if they log in by "email address", depending on how they logged in when they created the device.
Is there a way to update that attribute?