You can't operate on target like that, it's not part of the entityID. Target becomes RelayState which requires specific API calls to access, SAMLBIndingSupport.getRelayState from memory acting against the inbound MessageContext of the ProfileRequestContext that's passed into a script or expression-based activation condition. -- Scott