Subject missing from Response

[Cantor, Scott]

In addition to what Peter said, you can see what NameID will be generated for *most* SPs by using the aacli tool (it now includes the NameID generation step when outputting the SAML result).

The exception is when the format chosen is based on NameIDPolicy in a request rather than NameIDFormat in metadata or other criteria that can be statically derived.

-- Scott