OXAUTH-330

The sub Value in the ID Token should not be a re-assignable identifier.
So the subject can't be the 'uid' or 'mail' attribute from LDAP.

Inum is a persistent non-reassignable identifier, so it would be better.