now works fine with MS IdP