This article is no longer necessary, thanks to OOTB behavior available in ISAM 9.0.6 and later. See details here.
In order to clean up the instantiation URLs generated by the authentication service, you can use a ISAM HTTP transformation rule.
I’ve just completed two examples of this.
Remove PolicyId static prefix:

This transformation removes the need to have a long static prefix at the beginning of the URL query string parameter you call to instantiate a Authentication Policy.
urn:ibm:security:authentication:asf:
Such that the URL used to call it can look like
https://<webseal>/mga/sps/authsvc?PolicyId=password
instead of:
https://<webseal>/mga/sps/authsvc?PolicyId=urn:ibm:security:authentication:asf:password
URL based instantiation – no query string:

This transformation allows you to call the authsvc with a URL with no query strings.
Such that a request to authsvc can look like:
https://<webseal>/mga/sps/authsvc/recaptcha
instead of:
https://<webseal>/mga/sps/authsvc?PolicyId=urn:ibm:security:authentication:asf:recaptcha
