The FriendlyName of each attribute that has one, by Name.
Every attribute, by its Name, with all its values. WS-Federation identity providers name them with claim URIs.
OptionalauthnHow, e.g. urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport.
When the person authenticated.
Whether the assertion arrived encrypted.
The identity provider's entityID.
The subject's NameID value.
OptionalnameIts Format, e.g. urn:oasis:names:tc:SAML:2.0:nameid-format:persistent.
OptionalnameWhen the assertion's bearer confirmation expires.
The realm the assertion was issued to (its audience).
OptionalrelayThe application state that came back in wctx (the relayState given to login()).
OptionalrequestThe id of the sign-in request this answers, from wctx; absent for an unsolicited response.
OptionalsessionThe identity provider's session: the AuthnStatement's SessionIndex. A CAEP event names it.
OptionalsessionWhen the identity provider says this session must end, if it says.
OptionalspThe WS-Trust version of the response that carried the token.
Who signed in, as the identity provider asserted it.