public static boolean parse(String token, Map<String, String> kv) {
    String[] splits = token.split(ATTR_SEPARATOR);
    if (splits.length != 5) {
      return false;
    }
    for (String split : splits) {
      String[] pair = split.split(SEPARATOR);
      if (pair.length != 2) {
        return false;
      }
      kv.put(pair[0], pair[1]);
    }
    return kv.containsKey(USER) && kv.containsKey(CREATE_TIME) && kv.containsKey(ID) && kv
        .containsKey(SIGN) && kv.containsKey(RELAY_STATE);
  }
A token is generated when the SAML assertion is successfully validated. This Token
is passed back to the client (Jdbc/ODBC Driver) via the browser. This token is
presented by the subsequent http request as a bearer token.
service/src/java/org/apache/hive/service/auth/saml/HiveSamlAuthTokenGenerator.java