How does CF determine which SigAlg to pass when using the InitSAMLAuthRequest function? I'm seeing sha1 be passed when I believe it should be sha2 based on the signing cert used.