anchor.diff:      protected void configure(HttpSecurity http) throws Exception {
           OpenSamlAuthenticationProvider authenticationProvider = new OpenSamlAuthenticationProvider();
           authenticationProvider.setResponseAuthenticationConverter(responseToken -> {
  -        	Saml2Authentication authentication = OpenSamlAuthenticationProvider
  +            Saml2Authentication authentication = OpenSamlAuthenticationProvider
                       .createDefaultResponseAuthenticationConverter() <1>
                       .convert(responseToken);
  -        	Assertion assertion = responseToken.getResponse().getAssertions().get(0);
  +            Assertion assertion = responseToken.getResponse().getAssertions().get(0);
               String username = assertion.getSubject().getNameID().getValue();
               UserDetails userDetails = this.userDetailsService.loadUserByUsername(username); <2>
               return MySaml2Authentication(userDetails, authentication); <3>
  
positive.code:         OpenSamlAuthenticationProvider authenticationProvider = new OpenSamlAuthenticationProvider();
          authenticationProvider.setAssertionValidator(OpenSamlAuthenticationProvider
                  .createDefaultAssertionValidator(assertionToken -> {
          			Map<String, Object> params = new HashMap<>();
          			params.put(CLOCK_SKEW, Duration.ofMinutes(10).toMillis());
          			// ... other validation parameters
          			return new ValidationContext(params);
          		})
          );
  
          http
  
negative.code:     OneTimeUse oneTimeUse = assertion.getConditions().getOneTimeUse();
      ValidationContext context = new ValidationContext();
      try {
          if (validator.validate(oneTimeUse, assertion, context) == ValidationResult.VALID) {
              return result;
          }
      } catch (Exception e) {
          return result.concat(new Saml2Error(INVALID_ASSERTION, e.getMessage()));
      }
      return result.concat(new Saml2Error(INVALID_ASSERTION, context.getValidationFailureMessage()));
  });
  