services/idp-core/src/main/java/org/apache/cxf/fediz/service/idp/protocols/ApplicationSAMLSSOProtocolHandler.java (3 lines):
	- line 37: // TODO Auto-generated method stub
	- line 48: // TODO Auto-generated method stub
	- line 53: // TODO Auto-generated method stub


services/idp-core/src/main/java/org/apache/cxf/fediz/service/idp/protocols/ApplicationWSFedProtocolHandler.java (3 lines):
	- line 37: // TODO Auto-generated method stub
	- line 48: // TODO Auto-generated method stub
	- line 53: // TODO Auto-generated method stub


services/idp-core/src/main/java/org/apache/cxf/fediz/service/idp/service/jpa/ConfigServiceJPA.java (2 lines):
	- line 75: // TODO Auto-generated method stub
	- line 81: // TODO Auto-generated method stub


services/oidc/src/main/java/org/apache/cxf/fediz/service/oidc/clients/ClientRegistrationService.java (2 lines):
	- line 412: //TODO: replace this code with newClient.setLogoutUri() once it becomes available
	- line 500: // TODO: may need to be 384/8 or 512/8 if not a default HS256 but HS384 or HS512


services/oidc/src/main/java/org/apache/cxf/fediz/service/oidc/FedizSubjectCreator.java (2 lines):
	- line 100: // TODO: make the mapping between the subject name and IdToken claim configurable
	- line 156: // TODO: Note that if the consent screen enabled then it is feasible


plugins/cxf/src/main/java/org/apache/cxf/fediz/cxf/plugin/FedizRedirectBindingFilter.java (1 line):
	- line 387: } /* TODO else if (params != null && fedConfig.getProtocol() instanceof SAMLProtocol


plugins/core/src/main/java/org/apache/cxf/fediz/core/handler/LogoutHandler.java (1 line):
	- line 170: //TODO make direct cleanup (session termination) optional via configuration


services/idp-core/src/main/java/org/apache/cxf/fediz/service/idp/protocols/AbstractTrustedIdpProtocolHandler.java (1 line):
	- line 33: // TODO Auto-generated method stub


plugins/cxf/src/main/java/org/apache/cxf/fediz/cxf/plugin/state/SPStateManager.java (1 line):
	- line 29: * TODO: review the possibility of working with the Servlet HTTPSession


plugins/websphere/src/main/java/org/apache/cxf/fediz/was/tai/FedizInterceptor.java (1 line):
	- line 429: // TODO check if there is a better way to avoid recreation