title: Error in response while using SAML oneLogin code to connect to ADFS as iDP
body: <p>We are able to login to the ADFS iDP through the saml OneLogin java application.
  we have followed below steps to Edit the Claim rules of Relying Party(ADFS) to: </p>
  
  <ul>
  <li>enable return of email address in response.</li>
  <li>Right-click on the relying party trust and select Edit Claim Rules….</li>
  <li>On the Issuance Transform Rules tab select Add Rules….</li>
  <li>Select Send LDAP Attribute as Claims as the claim rule template to use.</li>
  <li>Give the claim a name such as NameID.</li>
  <li>Set the Attribute Store to Active Directory, the LDAP Attribute to E-Mail-Addresses, and the Outgoing Claim Type to E-mail Address.</li>
  <li>Select Finish.</li>
  <li>Select Add Rule….</li>
  <li>Select Transform an Incoming Claim as the claim rule template to use.</li>
  <li>Give it a name such as Email to NameID. Incoming claim type should be E-mail Address and the Outgoing name ID format is Email. </li>
  <li>Check Pass through all claim values and click Finish.</li>
  </ul>
  
  <p>But it gives below exception:</p>
  
  <blockquote>
    <p>Microsoft.IdentityServer.Protocols.Saml.InvalidNameIdPolicyException: MSIS7070: 
         The SAML request contained a NameIDPolicy that was not satisfied by the issued token. 
         Requested NameIDPolicy: AllowCreate: True Format: urn:oasis:names:tc:SAML:1.1:nameid-format:
         emailAddress 
         SPNameQualifier: . Actual NameID properties: null.</p>
  </blockquote>
  
  <p>Please advice how to resolve this error. Thanks for your help.</p>