Nor does this subject line make sense, a persistent NameID is NOT an "eppn". There is no such thing formally. "eppn" is a default-supplied shorthand variable name for the eduPersonPrincipalName attribute, which is not a NameID, and is named with an OID URN when passed properly in SAML. -- Scott