> SimpleSAML can, Populate it or enforce attribute filtering or other policy based on its contents? The former is easy, the latter would surprise me, but then again it was always a proxy to begin with. -- Scott