Download IDP metadata at startup
Opt for Shibboleth / Apache proxy-based user provisioning. Only have mocking when running locally.
Remove old SAML properties
Initial Shibboleth setup