Allow no attributes to be returned.

Rather than throw an error when no attribute statements are returned by the identity provider, return success and provide an empty object.