Distributed attribute-resolver.

[Rod Widdowson]

> I just don't, personally, love all that
> clutter.

I detest it.  As an occasional deployer I find it almost impossible to work
with.

> Maybe we could ship a default that's more minimal and have a second file
> as a more complete example? 

That’s makes sense.  I will happily take a UI to do the translate from the
V2 version to
Idp-attribute-resolver.full.xml.

I am not sure that I have the correct insight to know what to ship as the
default.  Any volunteers?  Or are we happy with what we have?

[Scope]
> I think you could get away with the second level DNS name.

Ant actually has a reasonable approximation available.  I can use that as
the default for the non MSI case.  I'll probably just have to prompt in the
MSI case (time constraints), or just take the ant value.

/Rod