SAML principal attribute release must pass through the policy

This pull request addresses issue #639
They are. They need the saml module dependency first.