[security-dev] PicketLink and SAML 1.1