decryption of SAML assertions