Just one small additional caveat when getting this to work: don't use a recently upgraded android to do your tests. Some recent android updates send the outer id as the inner username, totally breaking this feature on those client devices.