Attribute mapping and policy

[Cantor, Scott]

The documentation on how you get at the data when the SP is used is in https://wiki.shibboleth.net/confluence/display/SP3/AttributeAccess

Proxying behind the SP inherently requires building header forwarding into the system to carry data back to the back-end, which is best done by building rules to create headers based on server variables populated by the SP.

-- Scott