HCUK, > Any ideas? I would look at the logs on the SP(specifically, turn shibd.logger to DEBUG and then look at /var/log/shibboleth/shibd.log). It will indicate very clearly why the attribute wasn't mapped and supplied. Take care, Nate.