> No. You put the nameformat in the "name" parameter (XML attribute). Read too fast myself, so the rule is in fact not what was intended. Using name="eppn" id="eppn" would basically work to hack in that particular rule (an absent nameFormat in the rule will match "unspecified"). -- Scott