Use name id as username in saml.User. The old WAS-only code used the user-name typed in by the user when logging in. When logging in via SAML single sign on, we must extract the user name from the SAML ticket and the name ID should basically be what the user types in when authenticating.