OIDC: this user can't understand how to generate sub claim

[Cantor, Scott]

>    For nobody's surprise, the example file provided 
>    (etc/examples/oidc-attribute-resolver.xml) works great out-of-the-box.

Well, it might, but it's not intended to be used, it's just an example to work from. We assumed people would want to add their material to the existing file.

>    If I don't include oidc-attribute-resolver.xml in both 
>    AttributeResolverResources and AttributeRegistryResources the flow will 
>    fail with "Unable to produce a viable 'sub' claim" error.

Any file containing AttributeEncoder elements has to be loaded into the registry, that's what processes them.

-- Scott