* users affiliations are compared to eligible affiliations for idp
* current timestamp is added to map attribute if user is eligible now
* second filter adds the information to assurance attribute