improved PicketLink IDM integration