fix access management for entities who serve as both IDP SP