When discovering UserIDs using Auto Discovery, the "UserID" is not filled in when using Defender authentication even though it is specified in the template.
解决办法
WORKAROUND
In External Authentication, and in the User Template, change from Defender to Radius, where the UserIDs are populated correctly.