make it possible to also use an attribute as user identifier with the SspResourceOwner instead of only persistent NameID