UPN

A user's sign-in name in the form user@domain, used by Active Directory and Entra ID as the primary login identifier. In certificate-based authentication the UPN is often embedded in the certificate's SAN so the server can map the certificate to a directory account. A mismatch between the certificate UPN and the directory UPN is a common cause of certificate logon failures.