String version = decryptedElem.getNamespaceURI();
TokenHolder holder = null;
if (version.equals(IdentityConstants.SAML10_URL)
|| version.equals(IdentityConstants.SAML11_URL)) {
holder = new SAML1TokenHolder(decryptedElem);
} else if (version.equals(IdentityConstants.SAML20_URL)) {
holder = new SAML2TokenHolder(decryptedElem);
} else {
throw new RelyingPartyException("invalidTokenType");
}