The OIDC "principal-attribute" falls back to the "sub" claim if anything other than: "sub", "email", "preferred_username", "name", "given_name", "family_name" and "nickname" is specified. For example, if "custom_claim" is specified, "sub" will be used instead. It should be possible to make use of a custom value.