The getting start document recommends setting the trusted_third_party_id_servers option, but as Synapse's sample config states, trusted_third_party_id_servers has been deprecated since Synapse v1.4.0 and no longer has any effect. It is only present for backwards-compatibility reasons.