External SAML authentication

[Cantor, Scott]

> Also it seems your resolver configuration is specific to an IDPv3 IDP
> that has been upgraded from IDPv2, i.e., it's using the IDPv2 syntax
> and XML namespaces. As such this wouldn't work in a newly installed
> IDPv3 without changes (removing the "resolver", "ad" and "enc"
> prefixes, and changing the type from "Script" to
> "ScriptedAttribute").

Those still work, they'll remain supported until 4.0. We would never prevent anything that works now from working until then.

-- Scott