assertNotNull("RequestedSecurityToken missing", rst);
OMElement elem = rst.getFirstChildWithName(new QName(XML.SAML_NS, "Assertion"));
assertNotNull("Missing SAML Assertion", elem);
Assertion assertion = getAssertionObjectFromOMElement(elem);
List<AuthenticationStatement> authStmts = assertion.getAuthenticationStatements();
assertNotNull("At least one Authentication Statement should be present in the assertion",
authStmts.get(0));
SubjectStatement authStmt = authStmts.get(0);
List<ConfirmationMethod> subConfirmationMethods = authStmt.getSubject().