+ TSM_ASSERT_THROWS("Policy should have tripped on InResponseTo correlation", m_policy->evaluate(*assertion.get()), SecurityPolicyException);
+
+ dynamic_cast<saml2::SubjectConfirmationData*>(
+ assertion->getSubject()->getSubjectConfirmations().front()->getSubjectConfirmationData()
+ )->setInResponseTo(requestID.get());