SAML Evidence Type Mismatch

SAML parsing and marshaling fails because setEvidence receives an evidence object whose Java type must match the expected WSS4J/XML hierarchy, but documentation obscures what to supply, leading to incorrect EvidenceBeans and broken auth decision content.