extraConfigurationsamlvalidationCertificatevalidationModeNONEPEER_TRUSTCHAIN_TRUSTPEER_OR_CHAIN_TRUSTCUSTOM