Help with name ID

[Cantor, Scott]

> Finally, I do have an attributeFilterPolicy releasing "mail" to the requester in
> attribute-filter.xml.

If true, then something else you posted isn't being used, or you have no actual mail attribute value to release. Debugging logs are clear enough to determine that.

The error is simply a matter of an SP requiring that format in its request, and that's not optional, the IdP has to fulfill it or fail.

-- Scott