The ancestor of the IIP - Component to validate user sign on in VLF-ONE applications (UF_OLOGON is the shipped version) has been changed so that in the CheckUserCredentials method the parameter #UserProfileToCheck is both received and returned.
The advantage of allowing the UF_OLOGON IIP to return a user profile is that it allows a Framework to validate one user profile but treat that user as a different user profile for security purposes.
You should make sure that your version of UF_OLOGON does not accidentally pass back a changed value for #UserProfileToCheck.