Rob, did you forget to commit a file? I don't see an implementation for the function initIdpInitiatedAuthnRequest().
It is a method of login provided by lasso. It generates an authentication response without a matching authentication request.
+1 Looks good to me. Thanks Rob.