During SpanVA installation it is possible to specify what attribute is used as secondary ID for directory sync imported users.
msDS-PrincipalName is the default attribute for SecondaryID and needs to have valid data.
Example of a Secondary User ID synced to CloudSOC via SpanVA DSS (Domain is CASBTEAMLABS)