AFAIK the ID mapping only works when commingling the two "worlds" Windows and UNIX, i.e. AD and LDAP (or local/file) providers.
 We might probablly later combine from AD and two LDAP providers in single access zone.
Question about implementation of Two different ldap domains in single access 
zone.