SAML signature wrapping (XSW)

Move the signed assertion aside and inject an unsigned one so the verifier checks the original but consumes yours.