I have setup the IDP example to see it work, and was able to create my own example to use it as well. I see the token being pulled from the STS and populated with a subject and roles.
My question is: How would I pull the subject and roles out to use them?
Please try posting this in the PicketLink / security forum area.