Persistent NameID generation

[Cantor, Scott]

In looking at the message you sent in a non-plaintext form, I think you have a bogus character in your metadata so it's specifying a non-matching NameID Format. That explains why it's not running. I don't read HTML email so the message was ASCII-fied before I saw it.

I glanced at it in the archive at https://marc.info/?l=shibboleth-users&m=152511246325192&w=2 and I can see the bogosity.

-- Scott