principal token attribute mapping