pub fn validate_federation_id(field: &str, value: &str) -> Result<()>
Google pool and provider IDs share the same documented restrictions.