Bypass for Shib not using NameID
Support saml2 attributes