… how is NameID created, exactly, if not from an email address?