SSO with POST binding fails if wantAttributeEncrypted is on but the identity provider user doesn't have any attributes.
WORKAROUND: Include at least one attribute if wantAttributeEncrypted is on.
6563280