is <NameID> required?

In the SAML V2.0 browser profile, at least one assertion MUST contain
a <Subject> element, but the spec doesn't go so far as to say that
this <Subject> element MUST contain a <NameID> element?  Is this
correct?

Thanks,
Tom Scavo
NCSA