/**
* Get a sensible username for the user represented by the idtoken.
*
* @return string A username for the user.
*/
public function get_username()
{
$upn = $this->claim('upn');
return !empty($upn) ? $upn : parent::get_username();
}
