Having trouble implementing X509 authentication in Access Manager trying to use the UserPrincipalNam

We create a custom plugin per the instructions in Doc ID 1411853.1 but are not sure we set it up correctly.  We are trying to use the UserPrincipalName instead of the default "cn" and it says it is supported via a patch.  I already installed the BP05 patch against OAM so it should have included this patch.  We set the KEY_CERTIFICATE_ATTRIBUTE_TO_EXTRACT to SubjectAltName.OtherName.PrincipalName for the X509Cred Step and for the UIplugin step, we set the search filter to (uid={SubjectAltName.OtherName.PrincipalName}) .  We then created a Custom Authentication Scheme that uses the CustomX509Plugin.  It still will not work after choosing one of my certificates (either the email certificate or the DoD certificate).  I am not sure