Correct: The Force Invocation Tokens FIT principal is set to unidentified for anonymous users. This is then taken 1:1 by the Atlassian Spring Connect implementation and breaks the previous behavior where was no getUserAccountId for anonymous user. Just to clarify: We’ll just fix in our application.