public function validateIssuer(SamlMessage $message)
    {
        if ($this->getMetadata()->getIdentityProvider()->getEntityID() != $message->getIssuer()->getValue()) {
            throw new SamlException('urn:oasis:names:tc:SAML:2.0:status:RequestDenied');
        }
    }