Allow for config that has no user metadata
Allow for config that has no user metadata

If an empty claims object is returned to samlp, it will pass that through to saml20.create. This results in an assertion with an empty AttributeStatement block, which will fail SAML validation.

mcguinness/saml-idp