Parsing vendor request/instruction for SAML SSO

[Peter Schober]

* IAM David Bantz <dabantz at alaska.edu> [2016-02-05 21:51]:
> I thought I could just an SAML2StringNameID encoder to ePPN, but for reason
> opaque to me that resulted in the correct identifier but unscoped NameID in
> the Subject.  So I had to repurpose a different string attribute (the value
> of which is orthographically identical to ePPN), adding the
> SAML2StringNameID encoder.

JFYI, I guess that's because the scope is only added in the
SAML2ScopedString encoder you'd attach to a n AttributeDefinition of
type Scoped (based on the AttributeDefinition/@scope XML attribute).
-peter