for a nameid.

change AQ attribute source to work with AA and not only with IDPs

on script basis

Only works for SAML Users with persistent id for now

Also add script capability and use refeds mfa authncontext class if set.

Relates to ASSO-100