This required attributes attribute specifies the IdPAttribute name (as defined by anĀ <AttributeDefinition> plugin in the AttributeResolverConfiguration). Note, this is the internal name of the IdPAttribute "private" to the IdP and not anything to do with the name of a formalized SAML Attribute.
permitAny
Boolean
If this is present and set to "true", then there are no child elements allowed, and is shorthand for: