...
No other attributes are supported.
Other Considerations
All logins starting at their portal set ForceAuthn to true. They don't seem to be able to disable this, so if your authentication doesn't support forced reauthentication, or it is otherwise undesirable, you may have to make your Identity Provider lie, or start at your Identity Provider with an Unsolicited login. Unsolicited logins are supported.