duplicate attributes when using metadataAttributePrefix

[Cantor, Scott]

> The 'Meta_orgDisplayName' gets set in the end, just as expected, so the
> functionality is there. It's just strange that I see all these empty
> headers. Not a big problem on the application side, since I can just filter
> the empty values out, but it seems like the they shouldn't be there in the
> first place.

They have to be there.

> P.S. I am aware that I should not be using ShibUseHeaders at all because of
> the spoofing issue [2], but my current application only looks at headers.

If you're aware of that, then you already know why they're there. If they weren't, you'd be spoofable.

-- Scott