A service that can verify that SAML2 IdPs understands entity categories