I had to rip out configured Directories in vIDM and re-add them usinf UserPrincipalName instead of samaccountname and now all users are correctly identified by their upn (Requested By = upn), which makes life much easier.