Implementing claim-based authentication and relying party trust