If you're asking about the IdP and its filtering rules, you don't end up asserting the same value twice because two different rules permit a value. Additionally, the IdP de-dups coming out of the resolver to begin with. -- Scott