Adding an activation condition to an intercept flow ?

[Cantor, Scott]

> Even after attributes are pushed, the SP can obtain attributes through
> Attribute Query interface. Right?

If it has a subject it can query on. That's entirely up to the IdP, as is offering a query in the first place.

> If the latter attributes are different from the former with per-attribute
> consent, it may be unexpected behavior of IdP.

I don't consider that unexpected.

-- Scott