try{
IssuedTokenManager manager = IssuedTokenManager.getInstance();
IssuedTokenContext ctx = manager.createIssuedTokenContext(config, null);
ctx.setTarget(new GenericToken(assertion));
manager.validateIssuedToken(ctx);
status = (Status)ctx.getOtherProperties().get(IssuedTokenContext.STATUS);
}catch(Exception ex){
throw new SAMLValidationException(ex);
}