I need to add Active Directory attributes to the SAML assertion.  Is there documentation on how to do this?  Specifically I need to add givenName and sn to the assertion that already has the email attribute.