Pick attributes depending on the proxy

[Cantor, Scott]

Matthew is correct, ultimately the key is making sure only one of the inbound attributes could actually be populated from a given source IdP so that you don't get two, but as long as that's ensured, just pulling both into one thing, in either of those ways, should work.

To answer the relyingParties question, that refers to the SP, not the IdP. Other end. There is no equivalent "assertingParties" shortcut, though there are ways to craft such a condition.

-- Scott