To test whether an Identity Provider (IdP) is releasing all the necessary (but not too many) attributes we recommend to have a look at the eduGAIN Attribute Release Check service. This service asks the user to log in to several Service Provider (SP) in a row. Each of them has different attribute requirements and each of them has different SAML Entity Category attributes. Depending on how many attributes an IdP released to the SP, the check will assign a rating from F to A+ together with a verdict. Additionally, depending on the federation that the IdP is part of, local attribute release checks are also referenced.
