[EXT] non-conforming values of eduPersonAffiliation

[Cantor, Scott]

> I guess I could get the 'supplemented' ePA values, create
> the entitlement if the 'supervisor' value is there, and then
> remove any non-conforming values so the ePA as released
> by my IdP remains correct. I guess....

Trivially, that was my point. Nobody cares what's in your directory, least of all whoever's maintaining it obviously.

-- Scott