It appears the new spring security 6 library only allows you to consume saml assertions rather than generating the assertion as the IDP. Most articles and tutorials suggest using a pre-existing IDP such as Okta to generate the saml assertion etc. I find it hard to believe spring security does not offer the same features as spring-security-saml2-core version 2.0.0.M31? Is that assumption correct?