passport strategy for both WS-fed and SAML2 protocol