I sent them the attribute that list just the email and it didn't like that either. I was following along the same thought pattern as you. Thanks. -- Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html