Change NameIDFormat for Palo Alto Expanse to use email