A colleague of mine is asking about FAS in Citrix Cloud: Login with anything other than UPN has never worked. Like, if a user has user@company.com and a different UPN e.g. user@company.local. It's possible to configure so that Entra ID, when you try to login with email, FAS issues a cert for user@company.com and then failure. Is it possible to use SAML 2.0, and configure an Enterprise Application to send UPN to Citrix Cloud if user is using email?