initial description of IdProxy operation in SAML/PEFIM mode