> (3) release that attribute and exclude other nameIDs to the service in attribute-filter.xml That is not how NameID Format selection works. Format selection is handled largely the same as with V3, and is also documented in the old V2 documentation (via the link I sent): - triggered with metadata - via nameIDFormatPrecedence in relying-party.xml -- Scott