';
echo '';
?>
attribute response from the IdP (HTTP_SHIB_ATTRIBUTES):
notes:
The AAP throws away invalid values (eg an unscopedAffiliation of value "myBoss@<yourdomain>"
or a value with an invalid scope which scope is checked)
The raw attribute response (HTTP_SHIB_ATTRIBUTES) is NOT filtered by the AAP and should
therefore be disabled for most applications (exportAssertion=false).