Major Description
The SAMLTokenProvider supports to issue a SAML token based on the authenticated principal in the RST which means the security token sent in the WS-Security header.
It is not supported that the client requests a SAML token OnBehalfOf another SAML token.
