This image describes an example to smart card login use-case using Subject Alternative Name To User Attribute Certificate Mapper where subject-alternative-name-attribute-mapping attribute value is 1.3.6.1.4.1.311.20.2.3:cn@:ou