Adding a post authentication flow to an SP using metadata-driven configuration

[Cantor, Scott]

> This is a problem for us now. We can't go into InCommon's metadata and enable
> attribute-release for all the SPs we release attributes to but we still want to use
> SAML2. SSO. MDDriven.

And nothing is stopping you from doing that, that's the point of the EntityAttributes metadata filter.

-- Scott