Just a note here about the nameid-format. Other IdP's (like ADFS) might need different values here.