Hi, this is perfectly normal: AttributeHelper is created with property ClaimType set to WIF.ClaimTypes.Upn, so permissions will be created with this claim type.
Property LDAPAttributeToDisplayProp (which you set to "displayName") defines the display of the permission in the people picker, but it doesn't affect the real value of the permission, that is the value of the UPN of the user (LDAPAttribute="userPrincipalName").
I hope it makes sense.
Property LDAPAttributeToDisplayProp (which you set to "displayName") defines the display of the permission in the people picker, but it doesn't affect the real value of the permission, that is the value of the UPN of the user (LDAPAttribute="userPrincipalName").
I hope it makes sense.