// global httpclient configuration parameters
_httpClient = HttpClientFactory.getInstance(
_maxRedirects, Boolean.FALSE, _socketTimeout, _connectTimeout,
CookiePolicy.IGNORE_COOKIES);
_realmVerifier = new RealmVerifier(false);
// don't verify own (RP) identity, disable RP discovery
_realmVerifier.setEnforceRpId(false);
if (Association.isHmacSha256Supported())