...
The “simple” post-login subject c14n method does a routine extraction of a singke single UsernamePrincipal from the Java Subject and returns it as the canonincal principal name for the subject. It also supports some optional transforms to apply to the name.
...