Web application penetration testing of an identity provider solution and its integration into an application