13. An IdP must release one of:

• eduPersonPrimaryOrgUnitDN
• urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN
• urn:mace:dir:attribute-def:eduPersonScopedAffiliation

AND one of:

• id
• urn:mace:dir:attribute-def:eduPersonTargetedID