Allow SPs as well as IdPs.
Set UKf metadata refresh to 6h.