Recently, I ran into an issue where the NameID needed to be sAMAccountName@domain.org and surprised to find out that DUO DAG didn’t offer this from the GUI. Raised a feature request.
In the meantime, I figured out a way to achieve this and thought of...