Attribute query with qualified principal name

[Cantor, Scott]

> Which is not a transient. If you want to support standalone queries using a
> user identifier, you can, but there's no V2 support for limiting that to a
> specific requester. Once it's possible to do, any SP can issue a query like that
> and get back data that happens to be in the release policy for that requester.

Also, it would be a requirement to make this work that the vendor in question stop issuing queries with the wrong format. Using a transient Format constant would prevent it from working properly if you did configure a PrincipalConnector with an alternate format to handle the queries.

-- Scott