Duplicate Attribute Values after Shibboleth Upgrade

[Cantor, Scott]

This is an IIS bug that I have explained many times. The security fix to the SP exposed an IIS bug in the default document module. It does not affect normal access, Microsoft did not implement their subrequest logic safely and it contaminates requests. If you don't like it and aren't willing to report it, then you can set the de-duplication option in the SP to trim them out except for a few edge cases.

-- Scott