Quickstarts updated to demonstrate the configuration:

https://github.com/jboss-developer/jboss-picketlink-quickstarts/blob/master/picketlink-federation-saml-idp-with-signature/conf/jboss-eap/WEB-INF/picketlink.xml