<div dir="ltr"><div class="gmail_default" style="font-family:garamond,serif">Hello users,</div><div class="gmail_default" style="font-family:garamond,serif">I am using Shibboleth IdP 3.4 and am trying to provide an assertion to AWS services.</div><div class="gmail_default" style="font-family:garamond,serif">They need the nameID as email , however they do not want the email attribute coming in the assertion.</div><div class="gmail_default" style="font-family:garamond,serif">I tried different ways mentioned in the documentation but as soon as I remove the mail attribute from the attribute-filter.xml I see the invalidNameIDPolicy error.</div><div class="gmail_default" style="font-family:garamond,serif"><br></div><div class="gmail_default" style="font-family:garamond,serif">Note that I am using a policy override for AWS SP.</div><div class="gmail_default" style="font-family:garamond,serif"><br></div><div class="gmail_default" style="font-family:garamond,serif"><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><font face="garamond, serif">Thanks and Regards,</font></div><div><font face="garamond, serif"><br></font></div><div><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-size:12pt">Amit Dongaonkar</span></b></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><br></p></div></div></div></div></div></div></div></div></div></div>