...
- String Attribute values
- Values that match one of the values specified in a
<shibmd:Scope>element within the issuer's<md:EntityDescriptor>or appropriate<md:RoleDescriptor>.
See ShibMetaExt V1.0 or https://wiki.oasis-open.org/security/SAMLSubjectIDAttr for more details on the metadata extension itself.
...