MPass dev IdP stub — POST an AuthnRequest to /login/saml (HTTP-POST binding). Real contract: SAML 2.0.