Short answer, currently Lupasafe uses the department (if filled in in AAD) as a tag for the employee. The tag will have the prefix department_{department name from AAD}.