public function validateDestination(Response $response)
    {
        if ($this->getMetadata()->getFirstSpSsoDescriptor()->getFirstAssertionConsumerService()->getLocation()
            != $response->getDestination()
        ) {
            throw new SamlException('urn:oasis:names:tc:SAML:2.0:status:RequestDenied');
        }
    }