When generating a response, LightSAML IDP samples show it generates Attributes as mapping rules in the URL format: