Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx74b6d825-a0a5-3beb-8f50-bac4da38b53a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx74b6d825-a0a5-3beb-8f50-bac4da38b53a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qtoqrz6UfqyWhxRv+O4fH0j9nNE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CXRHOR3GaLliCQo5WnWxuOXHVKAIYWBiUDce9nRCLK/Cn5cdOEUnXJs/WKghocmLQ17hKBrUXmlzrZK/tzBjah+OJevUbHR54ZclRSIL5L4dTeH+/dxOyNJA1LRqX3jQF76jK68iaoEi8ccFPt3Zf+LdrDNB2+JSIueHGKmTvG8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx0cad9932-5221-6067-e9c1-e09f77dc63c1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0cad9932-5221-6067-e9c1-e09f77dc63c1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RhooFvWfwcelBDHMou4t1wbCXyI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>2T6HnPF6/pp4ZnffgfTiscXOfnXLzYgVRg4cn4ELpT5rvG59BOfyovv3QbwelNJGixF4Zljar9auHityxtzACc06jfcwijBgfnMEkqtzbapAgdviAB591QHA/pkwtGoK6l0Te3LCbnf5w19VzNNApEHQSG938VJ8uZe3AlmeQnY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2377d67e-ec1a-3ca3-3033-86412ef4fa2d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2377d67e-ec1a-3ca3-3033-86412ef4fa2d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>hTBJNgxzp4d7fmZUcu+USzE3nvU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>iSV3LDFQCwcVhfvEK9S5xSZUJ+6j+kdbUsa7hsky8KrXr0Vwyb5qrQHQ8ONbrfiPEznkervxnb+jrs1Svw/Xh5DKNO8bLE9w/j1sOOJuWKhMHNER5RcR0f7kQp99o8SOBleAKiua7KG+t2ErVx2O2rvgQfSIPsJobEWU6xcn48M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx465489c9-38ef-9e0f-07fb-71761ab9c814" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx465489c9-38ef-9e0f-07fb-71761ab9c814"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>FYn2BJBOWIQYfZN9GHSR5VTks4U=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>sDDV1CmZZ5vcdrqv2KeUQ4T8isUq15XlaE/ela+pMbKO1adSUOikYexm3X5JWjMqya/BNN9sK6VTtIgET+ztACHu0h+/Uktq/35r+oXeDjE6/C70WoFp5PwYwi43kr5VWIVvpxaACr6T65HOtvPJY/61zq77TTQhD5Xd+I1sZAM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>kGzEXGSx8a0axL/tj73mMI678K5G7BwWJDlx9NSEZfg8sfNDdrFoXwu+D2fuZgjknJND2Y54NvCdtFrm2C+mZv95O3OuaQ6dd0oAv6zxEMz/FFwWtA+mnF/RBe2qXx9TTHtOHnQPYDQ7m3Uv+CcYb5DIwst2t0Riqea7jtqeIIQ=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>kooc/xCjQ8AfFqEG2UAx99Ahh+MnAG3Ufqs0zzQLU2/5J7PhEiLA8o5FzZiA1UDGnSWKw948G/Q8kXar6FDFpVIOK4TpfvNL3e6UtXDt8N87Y91QH7BDWch2gRpeHaaVWIMHUuO6fDg2eZJHtEn3EmDNNAxbcl76JHRc62q995g=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx8542c53a-e350-92ec-7cdd-ca905cecdfa0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8542c53a-e350-92ec-7cdd-ca905cecdfa0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>dVyy/Cv2DRkcDCsOGc9ILXAQYXM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rWakEGU0RoT/X4bgT579mLK1wEeTCHT6/bzuSM7TmaEFnVxaCulSe9j8MlrO3f98Dzruq/BlOeYaryZ+dFWxh8I9O1BMOxd+qouAj1ZkPJEoonOZuvV10aIbDrzgoSI+Dc7nsT5jORa80TWQyphEZCu6y2GKoDaD1af3ew66Wcc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>kGzEXGSx8a0axL/tj73mMI678K5G7BwWJDlx9NSEZfg8sfNDdrFoXwu+D2fuZgjknJND2Y54NvCdtFrm2C+mZv95O3OuaQ6dd0oAv6zxEMz/FFwWtA+mnF/RBe2qXx9TTHtOHnQPYDQ7m3Uv+CcYb5DIwst2t0Riqea7jtqeIIQ=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>P+8yur7jdSZ8xA1q8lVimPGmgNizhyzz2UC8h+ylCvO4jYWGT0Xnal2WEA7BQYuTl3KumsQH3SnRu9WzU7eDTwQYNpRykCuTb1OYz/vlzjVxfIAYaHD0mzkeEKE15XeQwSBa5omq8jTY0/fPM0tcDEkJSoXWBxyrzlGe2LZ8euEZC6+cMHBAZWKvih9UjCjSSpWej8Up5vCFXtvs/KC7tjN3X7Dtvw8Qa1g1swHmFLJWfAyIkYoSsbHaAr0VayC+GLIBoGH1Z9203sHgq1SeExjD7p+olv9XQCLDWojDjEF0p4jmpWjW8uIk1SDeBlS2HALJO38AbP1V96ktNUVriuwQsHUAXEl1zX7oyBeoM2ctPzobj2ggckwCNc4fAg/nqlzbwIwyiytjub4BTDluoj+zAJZSdZ2N1qmhYm1wXrCLEmFVvSGaVQLMbX8kn31RdZaW9GGa9sOsDpI8G2s/CKgfeYUyIv9IlBere8cCn5dSSQQIPeEQZQn3Mbcbrftru2YQXK85nCUTkwZrBS2FgbuDipLm16T/JdemyWsS+9ERiE49txVNinEAkWotkIRAZdodgb3+uXy4y/YF32hw/pt65daRmImeH1vHV+0nem2dgW6luMWuAXJuVKwIG6W/cyZfJ4an+AElRe+DAi94DZelIfgkXekQaCSl6A4Ac1fmMn5tTj4IsSy7JfHN9yw//eH972R7WCL0DLU6tlrcKRK4RyoJmYfBKIw/uW1BhXUYG+/+A6IUgVBFLf+m9MdaHDifylNW+5i6PBF/D3CPDWUKzWT507ZgsJ4OV9r81wKS+SupiRT5USAjCFAEohuEb/ByFSkbMm6mC/T5f+XgWUovurMZqgttG7q4OrYEKq6ZCxGII/zghT6V1xA4eba9ufcT3Zw0TKk7BTcuSXIl7Ep8gnjTcSiK+Pf5mF42l11o7qi80jaFPIjMMjTZgzoxty8q7qnWjUCz/yvMT4cKaWjax0qj7gdzwIXwyZRdcPuzqogNHga4zI/zH/b+OjW+1E2t6y+1MMR3q87fSkFBo9cpOCjY4hq4FbceKGKNotzxxVckNPfiPdMMU/YPfb3FlvAtSQnD8C1yE4ndCdYxAPdWVsuvss/fA4fzw4PcTcRPLIoOvXpYcfR7jLIqKUh9nrIO679CxC0V/0LiAYaMkwe6gz74bwudkT9B9SzFdoUH1MlgKTm8r8xrGUDqMhvhNcIR0Yk3l1nNwyyGziVo8L6mj5gtzfThlTC4btwymozlmNVHdRU1+Hjig6+07L3++PQrv3dPz2UEz48P0T3nbMgoSEXaqLaY5Nq20hdNBz7II9C5xm22pzPy9BSfHI/1XFjkGAgP8r7WfWMbUwhW+3YY5mpRXNzUS5/mUbnSxi5ElDw+UhND/dSU8QLpNUdKvWAEZqp3KeVaHarMQAsjlMuHdK3LObe/WUiD17CipQgHkrxNvJYQWcbhdpq43QQo/6fg6NQyV/UAIdwyi/aV57oHSpvKVb3Xv4VJTGW1WkMl4QO4243Di/JZ2RKbOSnr1M5IdgxkHVBWPycIeAgFG4/AjRsj8e2y4luA6a2p2uPGg89nsHqXxHzXHdhySYkQLxsEKGkn99ICNsUI9kXuxHwy/oOYfnm8Z2bntjHXLAPtBJHbKYBeVo6JFroP2CQD9F70miZ2VM3ASeDyXJUppIElS/1rfT8/7QC2749KC+sp/TPdcQgR1dJ8mDTgV8EUAvLgYHHuoHJZpXDbUtvGXbooN7KT78vJAkbhgM4yZlQcWR5qEX3YEWCSvx2E6K/nZGEbIWjUOm7wKPv47oH5pMSm0KNv1EFGMwmkc0bAhNB7eLM4vi6GKgJS9KEN1vtF96JN2mZeZPTjfTjJomc7jr+nqq5+rEZGAy8D20fZEriEHNVV3BP3fI0y02z4i1UL5xD4BiSs5tHXJ91rQdUx0Wj/RDx0gStUgklw0nHpQH5uNwm7rqOcSdV6hrDg3BvUqdJaG5vGcRV+ze+pwJ3eb5yAHm3/QZVaRoQPidnFSy0ESChfKeNN6f4v1vBnjb0tm57Srzs61FCMWd4zx7txZUBGgi2d5dv7ullaFdBMUNYmZktEj/PzuCNF3UBhyMgTcqqDkK++Onws8Ibbc/NEo4ifygOkjmUa4yJO8mcVRZKvJvk/tjlmKwW8LOqVlf2jwsD/gErI/lhga5OfgcTFnmw4tZFyd2rmr47sd9ikPsoEOHAmREYIWlPVbUM+hP3ENpLtGMb0585eOyAtXQVEGs2PTSeCyokesrYK3oZzG0OdnVG+8IjbgaQfCUFlb6oT+vA6hmj9m/GkG1i+6AxQ99AX4jbCh+pLjESZRyCmL5OrbbRKsLALaLlLhvkWF2SFhyYi2pfrn3Nk9CDf2APaRITvF+f3wnOPTcj0QgDUAngPmtrnF2H/0a3rwp/xkJLS+qLq8yrL54uJ+4P9Sqogqq5WrCaJJ3GS+4zdJUwPulhJe+NqIsX/r7Xysr4QVaiuG5wmctPOSR8rgCazjXnQjWxP6VUcvyN6QlbIuBr/z7wND8kTMto2bY8qamGGcxrW0M0JoJZcLVFoh5jfOLKOO+vuE/X9/bSg6tmVOmA2h/nYVloLc42YfY0+6hqh3Z7qzF7oIYtuFqscL/hPhu3rewZcOntRGemm5EQ7w9ZEtSEUqzRhTi7gqxcO/wqOBFAEajTx6itJPmccOLZQ81knVf0yk3iOENVmJSwJ7B1Njqf+QtC6D0xePINkLJtoAqMmeXIZW3d7Ib8GRz2zhBBvE5OmHsNL+ewiXJWwnwhwI4WJyII0cfbdrUlGwXT4odbvYdmRZJeTJBdv5d64IrhjJZDJx9eVtD3CIn1icdFkM6cI3G4StoBMRUGuzqgq47RtOKw/MYT1Qy7b85OtEBCG71y7vfU387fdYnhomxJnPMw=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxa1595dcc-993a-a1e2-e855-2bf44d1af6f9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa1595dcc-993a-a1e2-e855-2bf44d1af6f9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>JoYgVuBkKrNOFpBTk1Juls8O8l8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CAifDQ0tKgVQRgBYtdh4jxZWkhT1BTrzkWA8Lma+9qDP6rSEvL+AoMr0Nl9mh4gXyoCrEk39ZdfDprRkWIJgPNgZ+g1TrkEqbZwlYMpZz9YGLbmlnsSePkUNOj78ulo9/XSFoRrOQ2WG+NAkINybjXwyj2hEs1OpfJCWGnA5mQM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>kooc/xCjQ8AfFqEG2UAx99Ahh+MnAG3Ufqs0zzQLU2/5J7PhEiLA8o5FzZiA1UDGnSWKw948G/Q8kXar6FDFpVIOK4TpfvNL3e6UtXDt8N87Y91QH7BDWch2gRpeHaaVWIMHUuO6fDg2eZJHtEn3EmDNNAxbcl76JHRc62q995g=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.