added support for client to restrict the number of idps listed during wayf by having them provide a scope query parameter during login with the name of a predefined set of entity ids