IIRC that attribute stores the old NT username. Thus it has no @domain suffix.
I’m trying to configure sssd to support also the traditional “short” username. Please comment here: