Hi @eyalnir_qlik 

"internalClaims" is post processed claimed by Qlik Cloud, which in your case is "Antonb@xxxx.co.il" "claimsFromIdp" is raw claims from IdP, so it looks you've overwritten the sub correctly, there's nothing wrong with how the product behaves here.

However if you're trying to match user names on your on-premise Qlik Sense environment, the "sub" claim should not only contain the username but also the domain.
Basically what you see in Qlik Client Client Managed (on-premise) in the "Users" screen you have "User Directory" and "User Id", both of those elements should be in "sub"(IdP subject) when in Qlik Cloud.

Example:
User Directory: DOMAIN

User Id: User1

You're expected to have the below in Qlik Cloud to avoid duplicate licenses

sub: DOMAIN\\User1 

If your user ID in Client managed is already Antonb@xxx.co.il, then the easiest way is to add your domain name in the "Realm" field in the Identity Provider configuration in Qlik Cloud.

Best regards,