remote_user:
  subject_header: subject-id
  headers_attributes_mapping:
    - header: mail
      attribute: email
      required: true