When sending back attributes for a /serviceValidate or /samlValidate response, e.g. <cas:attributes>, is it the ID of the attribute definition that is used as the attribute name, or the name or FriendlyName? One of those things I realize I'm not sure on. -- Michael A. Grady IAM Architect, Unicon, Inc.