The issue is that this happens before the service release policy can trigger.
For some reason it is going against AD with 'richard.frovarp ', which results
in a failed AD lookup. So it can't even get the extra attributes to return.
So it appears that the result of the principal transformation
Hi Richard,
I am also not aware on any native attribute trimming feature, maybe other
can chime in on that.
However, if you think groovy can solve your issue but you don't want
external files, you can always use *inline Groovy*.
Ref: