IIS 8 and SAML, Using TFIM STS

Hi,

I've set up SharePoint 2013 for SAML authentication with TFIM as the STS, and it's pretty straight forward... using SharePoint PS cmdlets, etc. There was no IIS changes required.

For just a regular ASP.Net application, I'm troubled as to what's involved for this application to use SAML authentication. From what I understand there's nothing required on the IIS side, as long as the application's Authentication is set to Windows Authentication.

However, what about the other things like...

1. How do you set up the trusted provider (i.e. import the SSL cert) so that the application trusts the SAML tokens presented to it?
2. How do you set up the sign-in URL?
3. How to you set up the realm?

Is this all sorted in the web.config?

Does anyone have a guide or reference article that covers this?