input: [Notes] This is an optional checkbox that controls the entity ID that google will send in AuthnRequest's (and what is expected in the AudienceRestrictionCondition of assertions). I recommend it is always checked so that the same identity provider may be used to provide single sign-on services to more than one GoogleApps domain. [Configuration Option] 
output: Use a domain specific issuer