Update the upgrade notes.

Mention the change in the way NameIDs are processed inside an eduPersonTargetedID, and offer an example on how to process the value.

docs/simplesamlphp-upgrade-notes-1.14.md

@@ -3,7 +3,7 @@ Upgrade notes for SimpleSAMLphp 1.14
 
 The `mcrypt` extension is no longer required by SimpleSAMLphp, so if no signatures or encryption are being used, it
 can be skipped. It is still a requirement for `xmlseclibs` though, so for those verifying or creating signed
-documents, or using encryption, is is still needed.
+documents, or using encryption, it is still needed.
 
 PHP session cookies are now set to HTTP-only by default. This relates to the `session.phpsession.httponly`
 configuration option.
@@ -14,6 +14,15 @@ insecure redirections.
 
 The jQuery version in use has been bumped to the latest 1.8.X version.
 
+Service Providers using the eduPersonTargetedID attribute, will get a DOMNodeList object instead of the NameID value. In
+order to process the NameID, a SAML2_XML_saml_NameID object can be used:
+
+```php
+$attributes = $as->getAttributes();
+$eptid = $attributes['eduPersonTargetedID'][0]->item(0);
+$nameID = new SAML2_XML_saml_NameID($eptid);
+```
+
 The following deprecated files, directories and endpoints have been removed:
 
 * `bin/pack.php`