scoped NameID SAML subject

[David Bantz]

Attempting to build a NameID in the SAML subject to meet a vendor requirement.
The following uses and inserts the right identifier, but despite being based on ePPN, 
appears in the SAML assertion subject un-scoped: If ePPN is george at my.domain, this 
uses the NameID of george in subject portion of the SAML.  To meet vendor requirement,
I need the scoped value george at my.domaim.  Is there a simple way to do that?

<!-- Okta requires something like ePPN in the SAML Subject -->
<resolver:AttributeDefinition
       id="oktanameid"
       xsi:type="Simple"
       xmlns="urn:mace:shibboleth:2.0:resolver:ad"
       sourceAttributeID="eduPersonPrincipalName"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xmlns:resolver="urn:mace:shibboleth:2.0:resolver">
       <resolver:Dependency ref="myLDAP" />
       <resolver:Dependency ref="eduPersonPrincipalName" />
       <resolver:AttributeEncoder
         xsi:type="SAML2StringNameID"
         xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
         nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" />
       <resolver:AttributeEncoder
         xsi:type="SAML2String"
         xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
         name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
         friendlyName="username" />
    </resolver:AttributeDefinition>

David Bantz
U Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140828/7c1b6880/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140828/7c1b6880/attachment-0001.bin