> We are looking to sync\transfer EmployeeID from ADFS (on prem) to an > external Shibboleth system. Then why are you attempting to encode it under the standard name for eduPersonPrincipalName? That's not a correct thing to do. Were I to do this, I would use the name for employeeNumber, which happens to be urn:oid:2.16.840.1.113730.3.1.3 -- Scott