Custom nameid getting released in version 2 but not version 3

[Klingenstein, Nate]

Using one *inside* a rule has different implications.

The distinction is intelligible, but I can't trace it in my head.  "Makes no sense to me" is utterly "makes no sense to me".  I'm totally lost.

Correct me if I'm wrong, but debugging this would go:

"What attributes exist with values?"
If it exists, "where did it come from and are these the right values?"
If it's 'right' once it enters the resolver, "Which filter policies are in effect?"
If it's not in effect when expected, "why... on Earth?"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160804/ea1d1d82/attachment.html>