Attribute Filters using DefaultRelyingParty

[Cantor, Scott]

One thing you probably want to do is to debug the filter policy using the
aacli tool and make sure the policy fires based on setting the requester
option there.

Once that works, I have no idea how any change to relying-party.xml can
affect the policies other than by preventing the attributes from
resolving, so I'd be looking for comparisons between the log in the aacli
case and the actual SSO case during the attribute resolver step, and what
gets passed to the filter.

-- Scott