New auth token is not SamlUserDetails, but a string principal
spring-security-saml2-core:1.0.0.RELEASE
https://www.pivotaltracker.com/story/show/76318518
[#76318518]