Duplicate values for EPPN coming from multiple federation release sets

[Cantor, Scott]

> Assuming the included aacli utility is usable in your
> environment, does it display the attribute twice (when you
> use the --saml2 option)?

With the --saml2 option, that's two encoding rules defined by misconfguring the AttributeRegistry service, typically by not upgrading in place at some point and copying files back over top of a new install.

If there's really a second copy without the --saml2 option, 
perhaps there's a way to actually produce two independent IdPAttribute objects with the same ID out of the resolver, and that might defeat the de-duping logic we have. I'm not sure if that's technically possible or not.

-- Scott