If it's V4, make sure you create the appropriate transcoding rule to decode the claim name; it's no different than trying to do this sort of thing in SAML. -- Scott