ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS.
Claim Rule Template: Send LDAP Attributes as Claims
Claim Rule Name: Send the UPN as NameID
LDAP Attribute: User Principal Name
Outgoing Claim Type: Name ID
Everything works for all users. However when UPN of a user is changed, SAML response from ADFS doesn't contain NameID tag in Subject tag. What might be the reason of the strange behavior?