This might also help https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506148/SPNEGOAuthnConfiguration