I was about to look at this because of another work I'm doing to enable a SAML broker into another project.