oxIdp should expect user_name claim