// TODO: This method can be removed when runOutInterceptorAndValidateSamlTokenAttached
// is cleaned up.
protected void verifySignatureCoversAssertion(Document signedDoc, String assertionId) throws Exception {
XPathFactory factory = XPathFactory.newInstance();
XPath xpath = factory.newXPath();
final NamespaceContext nsContext = this.getNamespaceContext();
xpath.setNamespaceContext(nsContext);
// Find the SecurityTokenReference for the assertion
final XPathExpression strExpr = xpath.compile(