Major Description
If the SAMLTokenProvider in the STS is not configured with any means of providing a token, it defaults to the ClaimsAttributeStatementProvider and the DefaultAttributeStatementProvider. However, this results in two AttributeStatements if a Claim is actually handled. Instead, we should only fallback to the DefaultAttributeStatementProvider if no claims was handled.