SAML principal attribute release must pass through the policy

This pull request addresses issue #639
we should indicate what you should do instead to get the same behavior.