Check the NameID policy during authentication