The SAML attribute to use as the email. If blank, we use the NameID provided by the Identity Provider.