anchor.diff:      <Attribute name="urn:oid:2.5.4.15" id="businessCategory"/>
       <Attribute name="urn:oid:2.5.4.19" id="physicalDeliveryOfficeName"/>
   
  -  -->	
  +  -->
   
   </Attributes>
  
positive.code: 
      <!-- Some more LDAP-based attributes, uncomment to use these... -->
    <!--
      
      <Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="telephoneNumber"/>
      <Attribute name="urn:mace:dir:attribute-def:title" id="title"/>
      <Attribute name="urn:mace:dir:attribute-def:initials" id="initials"/>
  
negative.code:     few exceptions for newer attributes where the name is the same for both versions. You will
      usually want to uncomment or map the names for both SAML versions as a unit.
      -->
  
      <!-- First some useful eduPerson attributes that many sites might use. -->
  
      <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="eppn">
          <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
      </Attribute>
      <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
          <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
      </Attribute>
  
      <Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
          <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
      </Attribute>
      <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
          <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
      </Attribute>
  
      <Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="unscoped-affiliation">
          <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
      </Attribute>
      <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="unscoped-affiliation">
          <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
      </Attribute>
  
      <Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="entitlement"/>
      <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="entitlement"/>
  
      <!-- A persistent id attribute that supports personalized anonymous access. -->
  
      <!-- First, the deprecated/incorrect version, decoded as a scoped string: -->
      <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
          <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
          <!-- <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/> -->
      </Attribute>
  
      <!-- Second, an alternate decoder that will decode the incorrect form into the newer form. -->
      <!--
      <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="persistent-id">
          <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
      </Attribute>
      -->
  
      <!-- Third, the new version (note the OID-style name): -->
      <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
          <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
  