So let's get things straight:
1. You have a custom STSAttributeProvider.
2. You use ICContractImpl with CardSpace
3. For SAML 2.0, the attributes returned from your STSAttributeProvider are not
contained in the assertion, but reflected in the DisplayToken.
If this is the case, it is likely a bug in the default saml token provider.
Please file an issue in Metro IssueTracker:
https://wsit.dev.java.net/servlets/ProjectIssues
[Message sent by forum member 'jdg6688' (jdg6688)]
http://forums.java.net/jive/thread.jspa?messageID=327528