The SOAP ArtifactResolutionService locations, by index.
The certificates its signatures are verified against.
The SingleSignOnService location for each binding the identity provider offers it on.
WantAuthnRequestsSigned; this module signs every request whatever it says.
What this module needs to know about the identity provider.