Signs SAML assertions for users authenticated via the SSO mechanism.
The proxy wraps endpoints (exposed as separate HTTP hosts) with single-sign-on authentication.
