@Override
public void getSecurityPolicy(List<SecurityPolicyRule> securityPolicy, SAMLMessageContext samlContext) {
SignatureTrustEngine engine = samlContext.getLocalTrustEngine();
securityPolicy.add(new SAML2HTTPRedirectDeflateSignatureRule(engine));
securityPolicy.add(new SAMLProtocolMessageXMLSignatureSecurityPolicyRule(engine));
}