uid and organization attributes are not always in `$creds['attributes']`, so we add an option for that.