Adding a TrustingEngine for IDPv3

[Benjamin Cherian]

We¹re trying to setup ADFS with Shib IdP v3.0. In the instructions we are
following 
(https://technet.microsoft.com/en-us/library/gg317734(v=ws.10).aspx) it
says to add a TrustEngine configuration which looks like this:

<security:TrustEngine id="shibboleth.FedTrustEngine"
xsi:type="security:StaticExplicitKeySignature">
   <security:Credential id="FederationCredentials"
xsi:type="security:X509Filesystem">
      <security:Certificate>C:\Program
Files\Internet2\Shib2Idp/credentials/adfssign.cer</security:Certificate>
   </security:Credential>
</security:TrustEngine>


The article says to add it to the relying-party.xml, but the instructions
are for IdP2, which I¹ve never used, and I don¹t think this is right for
IdP3. I¹m not sure where to add this in the 3.0 config files. I tried
adding xmlns:security to the XML and added the bean to the bottom, after
util:list. But now I get "Cannot resolve
'security:StaticExplicitKeySignature' to a type definition for element
Œsecurity:TrustEngine¹"

Is there a better place to put the TrustEngine bean? Is there an IdP 3.0
example I can look at?

Thanks,
Ben