@Test(expected = IllegalAccessException.class)
public void with_invalid_credentials_should_deny_access() throws IllegalAccessException {

    SSOToken invalidCredentials = new SSOToken();
    doReturn(false).when(singleSignOnRegistry).is_valid(invalidCredentials);
    kataService.handleRequest(new Request("Éric", invalidCredentials));
}