The correct format for NameID 'emailAddress' is: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress Not what you have in your saml-nameid xml. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://shibboleth.net/pipermail/users/attachments/20200925/09694632/attachment.htm>