SSO with DUO attribute mapping

We have SSO with DUO working however I've been unable to map the user's email address to their LM account. I *think* i'm just missing the correct attributes to map from AD/DUO to LM. Does anyone have this working, and would you share your config?