Google Apps - Invalid Email

[Muzinich, Mike]

I am sure I am missing something simple but I am having a problem with Google not recognizing the email address attribute I am setting and releasing.  This is for the upgrade to IDP 3.1.2.  I did not retain the existing Shibboleth configuration, I modified the native 3.1.2 config files.  The correct email address shows up when I am prompted by Shibb to share the information with Google and there are no errors in the logs.  It also tests successfully with TestShib.  This is the applicable attribute resolver and filter configurations.

    <resolver:AttributeDefinition id="EmailAddress" xsi:type="ad:Template">
        <resolver:Dependency ref="uid" />

<resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
         nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"  />

        <ad:Template>
          <![CDATA[
               ${uid}@<DOMAIN MASKED>
          ]]>
        </ad:Template>
        <ad:SourceAttribute>uid</ad:SourceAttribute>

    </resolver:AttributeDefinition>

    <afp:AttributeFilterPolicy id="google.com">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="google.com" />

        <afp:AttributeRule attributeID="EmailAddress">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
    </afp:AttributeFilterPolicy>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151028/57286f0e/attachment.html>