anchor.diff:      OneTimeUse oneTimeUse = assertion.getConditions().getOneTimeUse();
       ValidationContext context = new ValidationContext();
       try {
  -    	if (validator.validate(oneTimeUse, assertion, context) == ValidationResult.VALID) {
  -    		return result;
  -    	}
  +        if (validator.validate(oneTimeUse, assertion, context) == ValidationResult.VALID) {
  +            return result;
  +        }
       } catch (Exception e) {
  -    	return result.concat(new Saml2Error(INVALID_ASSERTION, e.getMessage()));
  +        return result.concat(new Saml2Error(INVALID_ASSERTION, e.getMessage()));
       }
       return result.concat(new Saml2Error(INVALID_ASSERTION, context.getValidationFailureMessage()));
   });
  
positive.code:         OpenSamlAuthenticationProvider authenticationProvider = new OpenSamlAuthenticationProvider();
          authenticationProvider.setAssertionValidator(OpenSamlAuthenticationProvider
                  .createDefaultAssertionValidator(assertionToken -> {
          			Map<String, Object> params = new HashMap<>();
          			params.put(CLOCK_SKEW, Duration.ofMinutes(10).toMillis());
          			// ... other validation parameters
          			return new ValidationContext(params);
          		})
          );
  
          http
  
negative.code:     protected void configure(HttpSecurity http) throws Exception {
          OpenSamlAuthenticationProvider authenticationProvider = new OpenSamlAuthenticationProvider();
          authenticationProvider.setResponseAuthenticationConverter(responseToken -> {
              Saml2Authentication authentication = OpenSamlAuthenticationProvider
                      .createDefaultResponseAuthenticationConverter() <1>
                      .convert(responseToken);
              Assertion assertion = responseToken.getResponse().getAssertions().get(0);
              String username = assertion.getSubject().getNameID().getValue();
              UserDetails userDetails = this.userDetailsService.loadUserByUsername(username); <2>
              return MySaml2Authentication(userDetails, authentication); <3>
  