Shibboleth - Configurable external ID attribute

Added a configurable attribute that can be used to identify the user
with the identity provider. This allows us to pre-provision users through
a CSV file and be reasonably sure that they can be matched-up later on