nameID format error

[IAM David Bantz]

I'm obviously missing something triggering "unsupportable identifier
format", but haven't been able to spot it; pointers appreciated.

incoming request:

> <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>                     xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"...
>
> ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"...


>     <saml:Issuer>
> https://integration.oohlalamobile.com/saml/uasitka/metadata</saml:Issuer>
>     <samlp:*NameIDPolicy
> Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"*
> AllowCreate="true" />...
> </samlp:AuthnRequest>

in attribute-resolver:

> <AttributeDefinition id="eduPersonUniqueID" xsi:type="Simple"
>                               sourceAttributeID="uakPersonID">
>     <Dependency ref="uakPersonID" />
>     <AttributeEncoder xsi:type="SAML2ScopedString"
>           name="urn:oid:1.3.6.1.4.1.5923.1.1.1.13" friendlyName="
> eduPersonUniqueID"></AttributeEncoder>
>     <AttributeEncoder xsi:type="SAML2StringNameID"
>            nameFormat=
> "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
> </AttributeDefinition>

in attribute-filter:

> <AttributeFilterPolicy id="releaseToOohLaLa">
>         <PolicyRequirementRule xsi:type="Requester" value="
> https://integration.oohlalamobile.com/saml/uasitka/metadata" />
>         <AttributeRule attributeID="eduPersonUniqueID">
>                 <PermitValueRule xsi:type="ANY"/>
>         </AttributeRule>...

in relying-party:

>         <bean parent="RelyingPartyByName"
>                         c:relyingPartyIds="#{{'
> https://integration.oohlalamobile.com/saml/uasitka/metadata'}}">
>             <property name="profileConfigurations">
>                <list>
>                    <bean parent="SAML2.SSO"
>                          p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
> />
>                </list>
>             </property>
>         </bean>

in the process log:

11:39:43:908  WARN [192.252.140.146]
org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:337 >  Profile
Action AddNameIDToSubjects: *Request specified use of an unsupportable
identifier format: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

11:39:43:909  WARN [192.252.140.146]
org.opensaml.profile.action.impl.LogEvent:105 >  A non-proceed event
occurred while processing the request: InvalidNameIDPolicy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170911/300f3a59/attachment.html>