title: InvalidNameIDPolicy working with ADFS
body: <p>I have many clients that uses SSO, for that we use SAML 2. Many of my clients uses providers like Okta, PingIdentity and a bunch of them ADFS. Doing the integration with ADFS always at the beginning raises this error when they came back with the SAMLResponse.</p>
  
  <pre><code>&lt;samlp:Status&gt;&lt;samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Requester"&gt;&lt;samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy"/&gt;&lt;/samlp:StatusCode&gt;&lt;/samlp:Status&gt;
  </code></pre>
  
  <p>Im asking to use as name Identifier this:</p>
  
  <p>"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"</p>
  
  <p>Im pretty new to SAML and I just want to know what is happening on ADFS, since this is just happening with clients that uses that.</p>
  
  <p>Thanks a lot.</p>