10
A Second way SAML being used:
Attribute-Based Authorization
•The identity provider gives attributes of the user rather than, or in addition to, information about when and how the user was authenticated.
"John Doe is a Gold member."
SAML Assertion
(an attribute assertion)