SAML proxy subject issue with oidc plugin

[Cantor, Scott]

> any ideas how to solve that? 

Strictly speaking that sort of data probably should be stored locally after it's obtained because this isn't a generally solvable problem, but you can encode them into the code/tokens with the setting that enables that, whose name isn't really top of mind for me. Probably encodeAttributes or something similar.

-- Scott