forceIssuer disables primary lookup and forces the assertion to be issued by the (whitelisted) issuer.  The product case is for marketplace not to have to kick their users over to third-party auth screens in the payment flow.