Card Space MAY be supported. If supported, at least SAML 2.0 token format MUST be supported. The token MUST also support passing IM / Discovery bootstrap token.