add substitution string for idp config