allow any URL as value of nameIdentifier