Proxy IdP hybrid question local and remote IdPs

[Mak, Steve]

I think I need another item clarified.

If my local IdP canonicalizes subjects based on uid (unscoped username) and the remote IdP canonicalizes subjects based on employeeNumber, and the remote IdP entities and metadata do not exist in my local IdP, can I take the remote IdP assertion and passthrough those attributes to the SP?

Assume that there is no overlap in uid or employeeNumber between the local IdP and remote IdP.

Or is the remote IdP only able to provide uid that my local IdP DB already has a record of?

- Steve