I've worked with a number of OpenID providers previously but am now trying to connect our solution to an on-site ADFS 2019. I'm hitting a few problems, one of which is that I need a static/public identifier as the access-token's sub (i.e. not a pairwise). I'd like to use the upn.
Is it possible to map this in ADFS?