SAMLv2 Attribute Query contains the following attributes for customization:
Defines the name identifier formats supported by the identity provider. Name identifiers are a way for providers to communicate with each other regarding a user. Single sign-on interactions support two types of identifiers:
An X509SubjectName defines the subject name of the X509 encryption type.
A persistent identifier is saved to a particular user's data store entry as the value of two attributes.
A transient identifier is temporary and no data will be written to the user's persistent data store.
This attribute defines the certificate alias elements for the provider. Singing specifies the provider certificate alias used to find the correct signing certificate in the keystore. Encryption specifies the provider certificate alias used to find the correct encryption certificate in the keystore.
Defines the SPI that finds the AssertionID mapping authority to return a list of attributes that will be included in a response.