...
This functionality can be customised by specifying a function shibboleth.oidc.AllowedScopeStrategy of type Function<ProfileRequestContext, Scope>. The scope returned by this function is used as the value of allowed scope: ie. all these values can be requested by the RPs without being filtered out.
The class ScopeUtil (TODO link to API docs) provides helper-methods for dealing with Scope values together with IdP attributes.
...