Passing multiple attributes

[Cantor, Scott]

> He is sending multiple values:
> 
> 	<saml2:AttributeValue... >account,sales</saml2:AttributeValue>
> 
> He doesn't want multiple values expressed that way in the SAML assertion,
> but rather in two Attribute Value fragments.

And the only way you get that result out is if the LDAP attribute is NOT multi-valued. So fix that, and the problem is solved.

Fixing it any other way probably means template or script, both of which are documented.

-- Scott