ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS.
Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP Attribute: User Principal Name Outgoing Claim Type: Name ID
Everything works for all users. However when UPN of a user is changed, SAML response from ADFS doesn't contain NameID tag in Subject tag. What might be the reason of the strange behavior?