Matching corresponding attributes between an IdP and an SP to identify federated users or add supplemental user information.