support for SecurityToken service