What is the XML rule for User match on CN?

<rule>    <description>User match on CN</description>    <conditions>        <and>            <if-class-name mode="nocase" op="equal">User</if-class-name>          </and>      </conditions>    <actions>        <do-find-matching-object scope="subtree">            <arg-dn>                <token-global-variable name="idv.dit.data.users"/>              </arg-dn>            <arg-match-attr name="urn:ietf:params:scim:schemas:core:2.0:User:userName">                <arg-value type="string">                    <token-split delimiter="@">                        <token-op-attr name="urn:ietf:params:scim:schemas:core:2.0:User:userName"/>                      </token-split>                  </arg-value>              </arg-match-attr>          </do-find-matching-object>      </actions>  </rule>