...
SAML assertions are exposed by the SP via the mechanism described in the https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAssertionExport topic, by enabling the exportAssertions content setting. The exportACL property of the <Sessions> element limits access to the exported assertions by IP address. This may need to be modified to suit the local environment.
...