samlAssertion = new SAMLAssertion((Element) assertionOMElement);
log.info("Verifying token validity...");
// check if the token has been signed by the issuer.
samlAssertion.verify(issuerPBKey);
} catch (SAMLException e) {
log.error("Could not verify signature", e);
return false;
}