// Provide info to SAML issuer that it can construct a Holder-of-key
// SAML token.
saml.setInstanceDoc(doc);
saml.setUserCrypto(crypto);
saml.setUsername("16c73ab6-b892-458f-abf5-2f875f74882e");
SAMLAssertion assertion = saml.newAssertion();
WSSecSignatureSAML wsSign = new WSSecSignatureSAML();
wsSign.setKeyIdentifierType(WSConstants.BST_DIRECT_REFERENCE);
wsSign.setUserInfo("16c73ab6-b892-458f-abf5-2f875f74882e", "security");