My engineer is out for a few more days, but I can try to look through a few components on our side if you haven't figured this out yet, we have a bunch of custom attributes so I am guessing we have this figured out somewhere in the code.
My non-engineering brain, I wrote this up long ago about SAML & custom attributes, it help at all? It's been a minute, but I know it drove me crazy how the same attribute would be called differently depending on what you are doing https://community.khoros.com/t5/Khoros-Community-Product/Using-SSO-Single-Sign-on-with-SAML-assertion-with-Custom-profile/m-p/628902#M11326
