Use persistent name id

nefed.xml

@@ -29511,7 +29511,7 @@ and do *NOT* provide it in real time to your partners.
                     </ds:X509Data>
                 </ds:KeyInfo>
             </KeyDescriptor>
-            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress</NameIDFormat>
+            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
             <AssertionConsumerService isDefault="true"
                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                 Location="https://s3.ariba.com/Buyer/Main/ad/samlAuth/SSOActions?realm=NUSystemCHILDSITE-1"