Access ephemeral SAML attributes from a rule or action without writing to user profile