2 assertions produced by the same IdP. The only config change was to switch from using the PL valve to the IdPFilter.