ID4126: To handle references for SAML2 assertions, extend Saml2SecurityTokenHandler and override ReadKeyIdentifierClause. ...