...
SAML assertions are exposed by the SP via the mechanism described in the https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAssertionExport topic, by enabling the exportAssertions
content setting. The exportACL
property of the <Sessions>
element limits access to the exported assertions by IP address. This may need to be modified to suit the local environment.
...