[explorigin]

This. Lots of SAML libraries don't fully implement the spec but I second what parent says. It does well for federation attributes.