Document doc = unsignedEnvelope.getAsDocument();
saml.setInstanceDoc(doc);
Crypto hokCrypto = CryptoFactory.getInstance("crypto.properties");
saml.setUserCrypto(hokCrypto);
saml.setUsername("16c73ab6-b892-458f-abf5-2f875f74882e");
SAMLAssertion assertion = saml.newAssertion();
Node assertionNode = assertion.toDOM(doc);
WSSecHeader secHeader = new WSSecHeader();
secHeader.insertSecurityHeader(doc);
secHeader.getSecurityHeader().appendChild(assertionNode);