User the 'username' attribute as preference to the userid one. We really should return both actually as PAS does make a distinction between username and userid.