The "if left blank" should be removed, it is old. The controlling language, from further down, is:

The LRS SHOULD overwrite the authority on all stored received Statements, based on the credentials used to send those Statements.
The LRS MAY leave the submitted authority unchanged but SHOULD do so only where a strong trust relationship has been established, and with extreme caution.