1) The AA now validates service provider credentials and matches relying party config...