Thanks Ivan! We have been working with our Client on this and have explained to them about
this and asked that they go back to the application (Service Provider) to make the changes
or completely remove those if they want the IdP to decide what it releases. It looks like
the Client was using Shibboleth IdP and that would just release everything regardless of
just what the application was asking for.