a SAML 2.0 Identity provider