we analyzed this with Phil, it couldn't be generalized - we decided to utilize the extensions points from the runtime framework to allow to map authentication URLs to authentication handlers
people will need to develop their own federated identity handler and register it trough the META-INF services or extending the endpoint and use their own extension