For users from an external provider, the username that works for me in admin_get_user is f"{identity provider ID}_{email}". It can also be seen in the username in the list of users in AWS Console's Cognito.