...
My current (as of today, it changes a lot) thinking about the SP is that I would like to try and adapt at least some of the general structure of the existing configuration in this area. Much like with the transition from IdP V2’s relying-party.xml from custom XML to Spring, a similar kind of change will play out here, with retaining (in Spring syntax) the notion of an “Application” as a containing object that optionally includes “RelyingParty” overrides. Notably we cannot support the existing SP syntax the way we did for the IdP, but the hope is to make the transition less structurally jarring than a completely different approach would be. A lot of this will start to take shape now as I wire things up and see how it fits together, and incorporates all of the IdP’s security configuration wiring.
...