On 7/17/20, 12:29 PM, "Kai Zimmer" <zimmer at bbaw.de> wrote: > I did that, her's the output. I'm not an expert, but it looks to me like there is no mismatch between in the NameID in > the original assertion and the NameID in the LogoutRequest. One is persistent Format, and one is "nothing", which is the unspecified Format. They do not match. -- Scott