InCommon MDQ configuration for attribute-filter and relying-party

[Cantor, Scott]

In a nutshell, the usual replacements for aggregate/group containment, which was discouraged a while ago for exactly this reason, are either basing rules on entity attribute tags {*) or occasionally on the RPI extensions that cover registration and publication (i.e. only SPs registered by InCommon...)

-- Scott

(*) Where MDQ is concerned, such tags are usually applied locally with metadata filters, not present in the source metadata.