Any advice from the SAML community on responding to the following comment from Simon: If the value is not simple or is empty, then the raw value(s) of the GSS name attribute MUST be the well-formed serialization of the <saml:AttributeValue> element(s) encoded as UTF-8. The "display" values are implementation-defined. Question: what serialization is intended here? An example here would make this more clear.