When the HS doesn't require an IS to send any of these validation tokens, riot should allow you to do all of these things when you have no IS configured.

This requires some spec to allow the client to know that it doesn't need to supply the id_server param to the various requestToken endpoints.