I think I'd use `external_domain.startswith('shib:')`. @brianhw can you make that change to this PR, since @jbau is on vacation?