diff --git a/roles/training/files/shibboleth2.xml b/roles/training/files/shibboleth2.xml
index 5108e2d..abfa90a 100644
--- a/roles/training/files/shibboleth2.xml
+++ b/roles/training/files/shibboleth2.xml
@@ -3,7 +3,12 @@
     xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     clockSkew="180">
 
-    <OutOfProcess tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" />
+    <OutOfProcess tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" >
+        <Extensions>
+            <Library path="plugins.so" />
+        </Extensions>
+    </OutOfProcess>
+    
   
     <ApplicationDefaults entityID="https://registry.comanage.incommon.training/sp/shibboleth"
         REMOTE_USER="ENV_OIS_EPPN"
@@ -39,6 +44,10 @@
 
         <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
 
+        <AttributeResolver type="Template" sources="ENV_OIS_EPPN" dest="ENV_OIS_SORID">
+            <Template>$ENV_OIS_EPPN</Template>
+        </AttributeResolver>
+
         <CredentialResolver type="File" use="signing"
             key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/>
         <CredentialResolver type="File" use="encryption"