[keycloak-user] X509 Client Authentication regex replacement possible?

To those that assisted me, thanks for the assistance yesterday, I finally got the logging that I needed enabled. When using auth-x509-client-username-form, is it possible to specify a regex *replacement* instead of simply a regex sub-string match for the identity? I'm mapping a numeric unique identifier in the client certificates to the UPN attribute in AD of the form '1234@domain'. Since the numeric unique identifier (i.e. '1234') is not in a dedicated attribute in AD, I cannot simply extract the identifier from the certificate, I need to append the '@domain' portion for the UPN lookup. If regex replacements aren't supported, where can I recommend this as a feature request? Should I reopen this feature request with an enhancement request: https://issues.jboss.org/browse/KEYCLOAK-4335 -- Raymond Page, CTR (US) Automation Engineer, UoT TIS CTR to Booz | Allen | Hamilton page_raymond(a)ne.bah.com raymond.c.page15.ctr(a)mail.mil C: (321) 549-7243<tel:(321)+549-7243> W: (703) 679-8618<tel:(703)+679-8618>