Shibboleth/apache/O365 Azure/Reverse Proxy

[Cantor, Scott]

FWIW, the reason you're not getting the NameID mapped in, which I think is what you're actually asking here, is that your rule is wrong:

    <Attribute name="emailAddress"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
id="emailAddress">
etc...

That's not how you map in a NameID. The correct mapping rule is 

    <Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
id="emailAddress">
etc....

-- Scott