injecting the saml_token into the SP endpoints