documentation for shibboleth omniauth provider