testing that sso auth attributes are filtered on lookup and search