The identity provider could not create a name identifier that adhered to the policy in the authentication request. Usually, this means that the policy specified an unsupported format or not did specify that a persistent identifier could be created.
System action
The operation will be halted.
Administrator response
Verify that authentication requests specify supported name identifier policies, or do not specify a policy at all.