See how to write a custom STS to authenticate against CRM contact entity.