List<String> roles = parseRoles(config, claims);
SAMLTokenPrincipal p = new SAMLTokenPrincipal(assertion);
TokenValidatorResponse response = new TokenValidatorResponse(
assertion.getId(), p.getName(), assertionIssuer, roles,
new ClaimCollection(claims), audience);
response.setExpires(getExpires(assertion));
return response;
} catch (WSSecurityException ex) {
LOG.error("Security token validation failed", ex);