Current implementation of HAL picketlink extension behaves differently that rest of the console in some areas.

Client side validation uses alert windows
This can be observed for example when adding Trusted domain or SAML handlers to Identity provider. Two main issues with this approach are:

1. It's different from the rest of Admin Console and thus extremely inconvenient for customer / user.
2. Additionally there is no way to test it properly – even web browser has no control over system windows (other then opening them)

Creation of new resources should be done via wizard window
The forms to create some of the "sub-resources" (such as trusted domains or SAML handler for Identity providers) are currently inlined. These form shoudl be moved to wizard windows for the following reasons:

1. It's different from the rest of Admin Console and thus extremely inconvenient for customer / user.
2. It makes the whole UI confusing as there is too much stuff displayed at once.