IdpSsoDescriptor attributes & nameIdFormat