A remove attribute transformer actions does exactly what one would expect - removes one or more of the incoming attributes from the authentication.
As this is a very common action it is also included as a step in many of the other actions, and this can be seen as a “standalone” option for removing attributes.
By default, this action removes attributes from the subject attributes set. It can be configured to remove from the context attributes or the action attributes, by setting the attributes-location configuration setting.
attributes-location
Configuring attributes for exclusion is as simple as adding them to the list of excluded-attributes, which is also the only configuration option for this transformer action.
excluded-attributes