Comment by thayne

There needs to be a way for the user to tell NPM whoch IDP to trust. And then, not all IDPs support automated registration.