OIDC dynamic registration policy ID

[Cantor, Scott]

>    I'll submit a feature request when I get a chance to make the
> defaultMetadataPolicyLocation a simple property on the profile 
> ather than needing to override a bean or build a map of claims and
> corresponding rules since it would be a whole lot simpler.

I have no doubt there's a ton of room for improvement here, but I'm not best equipped to understand the design that was done, I'm sure there are things I'm not aware of.

Do bear in mind it's not the only way to do it, you can also reference policies when you issue the tokens and just embed them in the tokens.

> I also recognize that this was the first go at implementing metadata policies.

That is the most relevant issue, this is really V1.0 of the plugin when you consider all of the issues, and this work got done very rapidly to meet some member deadlines, so it didn't have a lot of time to get reviewed.

We need deployment feedback, and I can't give it at this point like I do with SAML features, so we're much more dependent on external review.

-- Scott