SSO mapper issue

[caggles]

Describe the issue
Due to changes in how IDIR ifnormation maps to Keycloak accounts, there is now a problem where Keycloak thinks that some IDIR users have no username, which prevents Keycloak from functioning pretty much at all for those users. We need to update the mapper for IDIR users to fix this.

Additional context
Add any other context, attachments or screenshots

Definition of done

• test the change in the lab
• implement the change in prod