SAML principal attribute release must pass through the policy

This pull request addresses issue #639
Any way we can enable them automatically when you add the SAML module?