Store away the original XML document (the SAML response) so it can be used later.
Verify signature on an assertion in the proper place, after possible decryption of an encrypted assertion.
Seprated signature verification of response and assertions. Can not be done at the same time.
Updated tests to working with separate signature verifications of response and assertions.