Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx59615158-00df-2f31-9ddb-7b26365e2ed4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx59615158-00df-2f31-9ddb-7b26365e2ed4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0SnEzaxZJvPR4g96JtW4VP6OJ5c=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rhTzgw4/R5Z894RbvhSUvV2FAH1RhwXjtLKYNgcvCyWi6RTXwP/WUoVi362QWbQAk3o2RkAKqN61KKlFcR3kE8O7i+08MKXJWaIuWD6cJXFfTlOZo3IOjrciLc5O10kJUx3+vtO7bldeLju5gBOvWs2ar7OK9Rr6G2CIhR0ksas=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9917b65b-2722-7cc5-e45a-4ad91397fd3e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9917b65b-2722-7cc5-e45a-4ad91397fd3e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>uOzdqVMO6/NEZSJ/ZInh8DCIGKo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>XZ4YrTI15+di0LOT78ngNg05MGnxW77dfSnLv26NmHI3z2VDfqiPn5tDRjhwGa3FZmXz9O0H7q/u5eufGnREyK7RyXN5jCg7dVGBVWcRw3qDh++YShUlCcRWskoteh5pw/meJSHACzoah0AbS3/ycQrVDjqHZjpFK1a8jRcsy1I=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd8a81f0e-e47e-79a5-99be-4100a738a13e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd8a81f0e-e47e-79a5-99be-4100a738a13e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>eVsf3mvVQ8ZUpapgTTWtRXhXqhA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>D4i4MAPh1BlgSOY8t3988BKISdDxJqBcOrEKeGhjlGhphXPHFSswKYLnZCdmfClKtUACFf4WU9RjHou3atiFwp4USsITDMTJrSxV4jd2vqdCx5bBq3smolJ9N0EcjEZPgbZgDgU9vdC+iRv5nKOUPwsR+z4yoE58fzYl4MJkmZI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx2a6648e3-dbee-3506-184a-9b62419b9855" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2a6648e3-dbee-3506-184a-9b62419b9855"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>NWnH6smW2fZdpFIY67GyJI8ZH7E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>x9Z8ONtFPp3r4F8L4tqXelc/0pMmTcX0NPgyHYOOZNCL0pUJpY5GvIB6lhGFoCcYzgD4wyJp80CotZ9jlYJRRVCvNAZbduOB8k/GQ2vy7D6/zjnnZVIjeQnuQE2xT/AtYIHTr36ToF6B0FE6ZCnCutyjiEkdgQnvpwDCymE9Tjk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>DiQgGsxh7LjAfj34Jkr9IFJAlGllJY+NAH/cwqGqNBE7fvqX2uCVfbHSqiYrJgC9EuW5BBjmVND5JZa+3OBgie0eiSQzM4QZnpjfmGtKrhsHJx1qb98/LxxD3fpMar9bqX9qx0TSl2lGqEDtizjwq4MzBB6DEfwm17v1Imd48uE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>eYbMeyaDcHdJlnEeCL8S846LYEgr0O5rAZWdBjh62/h/amHRvVWkXvOxM+xfUqmmmblimduebS2UA+Rma1nq2HnWnX0Ybl91O09K+wmjUBcyEyfYTrt+06y8LmyaLk8Kyjtf8i7R13inHAFLt4tr+tubT1cI5i9go8fCa3Tlb3PymEfbBku5KwuLpqcBg0NfSiNDuObNO03vW5DhKjmWmtSBuHhQZVLGGzRtPZvrpfgfmsgveobjoau2o/GUY3mdLEQjghuOgLRxeOVEcEAm6Nu4WJXhkyWJjtByCiILhYz40EqTj7XRWUdkRa5Jj7ZcBMiMo84Mgq5IGjk0dkYeRg5QCq2wyRbknrM03hxAgv5G2LdGZCaSUWAHRPJuRSD5KIvxxIqBYO637Ji5ZnTxhyDrHw4wpqlFl3dihuysUq2kSfxqj4NutUA9NzDo5ruQlBrJffywGj0zUygSFYrlSk7aajU0AwFhEsUt1kMbuJgLQly9dGUW9igs7t8qS25qzgjCa5nfNXZ0Lt42Z7NynuLsFkfsP+NNwCH36YNUzsZPBqQluINz4R+p01noZG9k/DppkmPdIMlro4zFQFKSFRDXHJdefVsPYWOeUwMtOzNHr3FMEQGFD1DF8ru6TinbPxefH5VOHMD5WwVWceBTl/D5+dn/B77TzY0YaJICxxHheIkxv8iBDLOycCXqUUP6fbA64iVx5VdL29Pgcok1jwymrm2Q3rR6wQ6SfY2MHp49xPvMTlWjfWJOXev+FCP2RDNJ4LNrreebCEmhADDupQoRFAD8yWlhTQhiMgnrnIg1eY2PdgiwZQiak0wwItHuCft+iVXdCqbgS+eHz6x7aZc/AwhOlCtmZj9Af9I9iSpAHCDUH9MAwWCRYNP6xvX9Ji/oL2/1QFwn6pRZooL8uUw3b3yq1VlptvmVkzckFMrloAB5pyl6yPKwpkQq7x1H+Ls0x34I9HTZxF8F71W+jJz3EXtTzFdI9pJyu2j8HE59NSHrYQqYgJTusi1HKlS8HKxTmfawpJG/PwyJlwFcA/Az27iUEKnJUHJNvIoHCDXtYivt9wfljudZspfsCiaCNjczzilwwYIItCAUu/9zcwycNdIzP+nlmMhGd89gAj/y1mMlokhrYERUVQ+yB289f7BASuKjsbYshw/lcUGriuFPQrUrALAFTbGlsfGHYTpl4moDDBz7tcmsm/4WP5jMLElOAD6oa3OmwZJlrt4Dcm1/yYuih34KHpqHIdKryrjd6thPHsS86d0YhismUlRMxOZ8YDznLmxponbuNOad6TKk1y8CX3wEuv8KnC7gY5DFB61JMhIY/Q3S7p1jzy7tYabxitlXHyp5bKMh0/sWj+87RMivTjhDppsP7genbGxcKUW4SzDFPY2zAxRPgMetv3uOlHTNZkiSXcmcJQobqS0zC9tsCs20OoeUeaOYhzyAXTISw6gdd+1TIUWah7l2iRjCrBR7t81GqPr6I3yiggGTh1GqKahLyAFhSgQ8l8WiGtPGhHerMb0FfOhkWUKYbnP57GXreWDR5g6wKWeljgLq3R7WGnKKUZOk3wL80XMorT7sn1WScsiMUAp63vFcbTYfue+SAPJCv5H0f+j6QNrjGhyX/4yyDAiopQfznQ1qUsUkIObupVoh1Wg+X8AmbQod/x0++ZEwos5FGHVkh2MQjeGIs2RKK+9tPD1d1QewnFOfGjQD6q5svq/jnmUqTdMc7r5at33OL1FblQKS9V6e2y1eCO/zZELiweet6luoRz+bmy1i4UPNlVl4wBVAdVC1hKBeU18UNui+5i7gU0g8JgS6J+wto/VTl1jXPcSUAVRxUHpLFtufqqbIzzXjpzCFT6Ws8Ma5yXyraA7fsBm8X3sx1z9B5THlRVjsGtsHyrnEdF7IycnZ5wIdGCdPtGXhBkPbBMRzbBl9Zkp3urxtOVMBVwTqlrQs+xR2Ksm44UU7DQGTW/S4SOvLe/R6cEPjZwkEJc9cGnDa7iltaSW1wI7FsZV9sY224o5s6pitDPeb+n+CVxUUXnjLR5IgWsIOYrjxzwxbwr+nF3noWp43HY9uaIRh4ajSDvyt/m1O8J6UTyT1ghhgWLfR2IKTClvmLJaegM9kTVOWn4Dd/fwe5dJC82SRQWundEBLZMSgsjOYSAi7XAx6V6OfTDGayeEzVNMGGweqb1SZImvCz9KA0Vwtoo3xlG4t3Q4wWiYgkDcvttbjId4/kLxpankEl3NixSIa8w367SBBSZgkzjlf1CbZGv4E47/9RCp2LfpSLzO0AO2dJxEpw0bGUNMGFiVVcRxlzdLD0heM4DWow+3XVsdmMb9IufdZloelyLgmUb1ekX1nuZzVD/IDdCcidG/qcqGd1AZuq31NmIcXFRMe/o3pDUAtFhdAwWKtrz4514RpSjuHuLaNYSEI4UcePSXJCxNnAReqinSZdHi5E47BZVb1+DzEVS4n1o+vqPJwhy1n2gw9tZcKFURVoGpalZw4L0KRD7KfbWcRPguM0Em55ihphdDV4pdkGPGrded5Sehja+S7FCCNI2OAxJtQRQcuQOt4+pLdCzw9P609ucK4n31gpHEOlhyap/RjBG4Gy2IOYp7d8XiqjSNboJF4IqT3Vq2Wd1r05PK3+5deUKRZdD6fYi4Y2Lsrg9n4NkfOR7WHD3eQCwlEG08Tdy91KD52jSpomYKEDj+siYuYdFkgJ9yiS4LENswDD6VsMa9R6SBrxqbS+nk60FSjSWh8LtwFGwBxG9ruBWK14JvajJ3/UtYXI4oKteR9b8E2dbtvx0TZTq7LAmn7CUjkjTphu4cxJEeb/SNV3KBj2aArFVnkkYpF3FUmI10jkOBKrJy/+WmBQsWc6nqAd3lt+vo1X/uphR+gN8AO3lr0yis0ISurig3aPFh1uwwdoFrgbNw=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>jna4iU3kU8ZvqVxtVD6HkVRL7hmnV3VFpAbE65mKddc0bKL2cOU/ohPgsi0B2P3gN/fy7PC05PeFedaSq/dFDEfeQlpG4OCgmmwVhxDMKOOZJdqkL/owvZGZF22uQAf9jix/YF4i4Vd54RKSf4xecYVYAd5CgRFnLrGF8HesY9c=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx7d8fbfca-6fae-d335-c83b-ef6bcfb602fa" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7d8fbfca-6fae-d335-c83b-ef6bcfb602fa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>pE7usIWqULM+sdCliEOWh3uFQws=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>O47xifdlMBA0hZGmbfzwY7HBOCA0C2KUrOycmQu+ssQMav8p1LtHp5UzopO/ng7XsDWY0AmElwqsselAlyoMqsFm1wW8ykyqnuMroVcJXDkxNpj59Xip3oRTpIfj7AFPT+3ns2MmW8twGGjzuUKLuoRqHhrpXgozZUcxN6B+M04=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>DiQgGsxh7LjAfj34Jkr9IFJAlGllJY+NAH/cwqGqNBE7fvqX2uCVfbHSqiYrJgC9EuW5BBjmVND5JZa+3OBgie0eiSQzM4QZnpjfmGtKrhsHJx1qb98/LxxD3fpMar9bqX9qx0TSl2lGqEDtizjwq4MzBB6DEfwm17v1Imd48uE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx02103a5f-615b-e67d-aa5a-a5af008fa35d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx02103a5f-615b-e67d-aa5a-a5af008fa35d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Ma8pu4vbEfGfYA9mF/BaBIeEvVI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>l5TZWtRYoxBjfp/L5B9DiVwd4l0vbQ2bWP+MpHdKG6kZpAdB0dzBofoMQwSXWLV8qZ9Eli9m347ANRXkULN39k/xHlsGcs9ZutnflOBuHs2KTg95UbWEK9/1PwdON2LEJCSGTsE+e2NxuObAoP1+UJMx0M1yI5tJUs0sX5xeqXg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>jna4iU3kU8ZvqVxtVD6HkVRL7hmnV3VFpAbE65mKddc0bKL2cOU/ohPgsi0B2P3gN/fy7PC05PeFedaSq/dFDEfeQlpG4OCgmmwVhxDMKOOZJdqkL/owvZGZF22uQAf9jix/YF4i4Vd54RKSf4xecYVYAd5CgRFnLrGF8HesY9c=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.