> Read too fast myself, so the rule is in fact not what was intended. Using name="eppn" id="eppn" would basically work to hack in that particular rule (an absent nameFormat in the rule will match "unspecified"). K, for a quick and dirty test, will try setting my map to be eppn for both name and id.... Thanks, Dennis