Use the issuer_url even though it is ignored for anything other than federated logins.