[EXT] non-conforming values of eduPersonAffiliation

[Cantor, Scott]

> To be more explicit, the constraint is HR's population of
> 'supervisor' into the directory that is the issue: they already
> populate conforming ePA values and can add the
> 'supervisor' value as part of the routine sync to the record
> of users who are supervisors, but they do NOT want to
> revise or add a new process to populate the value to a
> different attribute in AD.

It's your directory. It doesn't follow that you have to produce such an Attribute out of a SAML IdP. Just turn it into an entitlement.

-- Scott