Add support for SAML Code "unknown principal" on attribute query

The IDP v3 returns this code, if no persistent id is matched.