Attribute is a name-value pair that can be used to specify any additional information about the Principal not covered by security tokens and roles.
If authentication is not configured, the Principal will have the UserID anonymous with no security tokens, roles, and attributes assigned.