assigning eduperson based on memberof

[Cantor, Scott]

> Why not create another attribute based on group membership & then use a
> MappedAttribute to build eduPersonAffiliation?
> https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverMappedAttri
> buteDefinition
> 
> We do this for eduPersonEntitlement and it's worked out quite well.

Mapped would be my suggestion, though I can't imagine the script could be acting that oddly, something else must be involved.

-- Scott