Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx84826ba5-f355-4e6c-a9fb-db97183d56f7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx84826ba5-f355-4e6c-a9fb-db97183d56f7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Km4ZdAbMYfHekxa8d3U+sFVsjK4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>gfBBv8XCaIsGsuszI7iKwhqc3xQJD/17XqsUZxyEamKs50SgaNJffe6JWD/t2b+3wvPoKItFXK6z8WtrwKBqmE7RUoUR+2Of0ch+P6s9Yr+nG/cEjzkvwVuRxuYMEeZ3Te50eVo0n3V+IhIo50ZOj6oNKapQ7PVPsREN0DVBSMo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx0f0176d1-a423-134f-66cb-7cfaf3ab8c2e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0f0176d1-a423-134f-66cb-7cfaf3ab8c2e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>XEZ3LqGeN6oW9+nATBp/KKlBXSc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>zGLmtZ7tA1a2rsn6Zo34k7EmSjdRnq3WN1TLUMtoZUEQ1KykCjPJ8Ej7TZJVeULV1XMr8v22LMS2EVqMminsWDWfmU+GF65nz/XnavF/MmPHHyBxc73u9tpCyu3MXeo+Unbo/kkB83z41O74zcNCprEbVjYZrmAEE5Fd2c9zeCU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5c6f394b-7bfa-c0f0-e07f-a5304aae6f03" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5c6f394b-7bfa-c0f0-e07f-a5304aae6f03"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>l93B0PBovsPSybhbKcbUSnz4c2Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>0C5R9gAd8Fd/CqC0erPwVy6KS1H7CF4byLCnjvqPNKldskb7ORCF7xPOJm9SwHCfQP80S1yCX1fLNYB1zwK/cYRP64QkbyTx1H6jcGc40z+ZrsEtWbZRiYmeyW1QUlho0SyYYK/8sqqNNZ1bqeSTDxQZk2KWLtMSR3aDGgRXEeI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx36e27ac1-f7d9-6cb7-8da3-96ba63cfa85a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx36e27ac1-f7d9-6cb7-8da3-96ba63cfa85a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Oaj7lJ7ma8l7PPexuPhQVXqMKWY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PIN3AGw+jE/GUCZKxyYd7jgxh/OxhZ/Ir6yEf6kBSA5oWAValdM1SNwuHYzj03h3936MSy0Oftvy64KW9hwtR4l0ghJ8zewmmPV2ttnZSezDVerRq1km8st2MT3TgXnsYfwlP8HY31q+X7jER2yqzAb7nyTbVe3TPxCa+lfseQ0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FeaygY5enajaGNvrDEAkui4+G1ybFzKXfLgMfPwwP1o18rr2b/cEV7kCMhHgmXkqBNanl4a9XWZVRugxdhIn8/skx9KK7MuRkWPOo2DS9BR4YEq/JYJfGA9kcozfoQyU5U73rtPXhkfw7N4DUCxOcEQwWWU2qjh6xrmw7Lyp/Sc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>cGXvbYFoFsmycntU/CTQswRqzwchnBf0UzsNn9kk5YOkrIIAokwiC9TAc9v+M+vN/kvxyokc9batB1dQ04k078UthOGvjxIwlgjl7nTTpOVVaqQh8tmaFdFrVQJZj/MvKx+Bb3phyJ4g/0XrPfn/8i4V8XDEJK39FzL1kp9AKS5SWwcNhqnZ+yr9ep3i9+tVvFr8YmWZU7UscYF8obs4Qx9vTNaF2MUlXZ+/t4382l6OWFTMPDHdX+4nQUSNPMj9gBcRt5dKeRrcku3zqyxvDwSZajZQZ3awSmDEFtjwDEpJpA3L0tw9WdDQr0KwRTT0jR5rAUBI9tEqLGAuSk75NJ9vZzA5cYqlef8f9TJB0hcCRn/0cSSBm6Ptfz6/zCjWkC0EODPhuXzKNQHACzJBbyvR3FWaS0v1GFDltaAc59Fg2Ily0MCBfBZRYTvfYXHs8ZnAmVDiUxzqWK0Yzbjg9U5VrjeaStl6OQIty4qzEeKuMQnONR0JZnMWKKAVgth7It07X1FsyHbAkkwCPAKeKfiq5Cxym3IiAGIsg1/mCg/wlHep10mm0bt+5lHy+Rq3x8/MM2lv13/ZgloE3X00az6LcJDgvmrjsA5QnNqU0B086xFI7XAvC4lRvDTVNQDOC8ZNrTY1uCkS/D0HICDOkvNa/uQTR+8Ud4iZIcLJTVPtPUmJCGkuBKAOR76NimDG2qJAHozTi08TC4Twfd1J65J7S2Pifv0JKk7cgR9qInCWtOP8NE23XffXOLQ0iswIceyrgUdGbHIzvlcFYYjC4RtsHZPa4tI0WpqfiAt5W3TO5uF/TcY2Q4VPM1hAQe9XftPjr4KmbmPOT41Z5C5uJkxUTeJZDEg3a0qqeRL3VcTV7Nj7KyxAQ63vVxiUhU0OgFmeACvUezhnbIQRLr9SBDlBvtkBzUlHJ7z+9H5Mj2LvAuai51jhDgZWykcdfSerjBKUnAg9hJD2SIwqbr7YVcPsDB7n1biwk18gCUffpmPhCIWwHL5xrFWULZA95ihRu6fPu9sHOY5a+joLQ08/9ChTE1sA8PbO/Qs0NLsCh+MGEtli86hvJddoIn+GEbIZNPAkfQWhue7FqepTssU6k+BoW3c5ybqip5q3Ye5Pd1uTQRbEiKMj82WHCx5tjFxGozKDq9qi8I3BnSK1QBjANsONsZiEBRj5zafDwKDVs5mPAT9yCPdBjrFWmUwfGC/qplyeumv87XR9umX/x050hHQP3qAYRvI85m1cm1zbhD7ostbPO4+W0PVwKg0CPKeWA0q4A1cigwY6vi8NPHF9E7kaJKGG1VM+tF3DVgt0ztVukbJjoNDF5UD3GRuUlyg4nc3a+CdWQBP9L743ZI/WkSBzH/D2Cw6PQNC6o69aVsJkxuvXZm5C8prONlJoFldVkW6VDKY9P5CsZogV3o3HYkp2JcylZ/PbmXi02BojAbCb9CibppAJ9DrKt2o2s/mz/v/7cN+uvHkw5WFPEgBTgHTooxEVFwXnuLAIN2TMZjFayfaiJbnWZBGw5mtPk9u8ly54eawxjwG0zbFYlPram1QMRAcT7EV1dq3TAOT0zn/Txq3UWgVO0l82Kmi5pHRG7Jvhke0kNMuR1eAJCbjonnmvUU0S4OfrssxXSNyoVnRgPR0qh3puE1iGZOV8xJSm+z0A8O+GcaR9MOhn/4uRVbISQc+2jjf4nLV61gnT5qT1ccBrVhuo6A4F9jFL1WPufGvPgc902kcKtZpC7GgC5SEYQULsmvNfD5vLCW6pM1P+2trFPcbDl6tCJ9Y9kY2+AA7e6cZNwORSUqsZKzBwu610LyJlNM+Q/aynIEDNAiXyu49uFGEHHaI55M4AdEaczwtmJSIQCkHfRBZs6ij8kKql/98+zM/XseqrGhM7pSeEBsyeTY1ZpQShJvw3sIUDhjXU6/7mP4hwAS52XDOLTLdNk8E+ykFEzDcSpLoVoF5N5/qRC/fQ9zyoRwlNICqJWrElNuaNpSGe4ybYccKX/qjuS26BMgBjOMpsWILdSPmZynBVPcjzJ6+FB8nX2MnIQqhm1Bpb2463KxqchaujYtUDLlcalQPvxdkjXQnMeFcpz4xHN5hRxPvswwcCw6PyDAgEaSoBYI4pkUkaxFz35v+kgJoCwYZ+4LDAk8VEfkTJ5OV7un13Qn+ngQ+2YLci3EaO4oZk0iAZCKsabx6vFkFUeZtNpG7qzqHr20MUxOyTK7nCW/RwzdaN3b6X1zJ/jVGJ05BUDSZSiInZj+GNYCtdzVzL0B+e+QMKcKNmYmlPNF7oZQglcalynkpI9d4eW1GHmv03DNCI8hLpqYKh9XxneyyXVA9/cM1hZcKq1QatRG3K0zc1Q8LkI+LT8k3WDk1awEr43xWFaq8NyShDk6Q2MqcVFzyf8gFPQTNIGhicJs0RGifMgnFCPTojqViuAJFm9r0VJP7Hkl7OWzI+JpvZ7PKovG1IvXcU39K+ynG2tZyBDnRGbYrmGySy6sqs3UCA0j2X3vAubobwEpm9iYEhefauWkQLRdt5yRiBkINK4XtvMFOtgNwNuIdSQcNo9loF/Maf81eEghWFYlD9VUv00+IiCbvXZ+z3y21Dx9eot+ZKS55CVfQnyoXwoA9gh30RwPLl9vZicLblaUmJaihHm59dAWxdlVjCG8L6J1BcgKMB4ySuwGrKYTeLuhalPowGx+SIRWAfByCFS+0hBisS0YW6UGXkHFQBYhjZQ0HCbtWSou+Sthi48/A1SDu3lumMuT+l4efZxSUKcL5w4pesToZt9srn9JeUzIT34z8d4Shv0winV7uM0HLAuDiZAVe9McfQrT//IdgXPtSzEgv69ZE6Y0psJA8NYx1r3PovBm1mPYpip60wISnjUzzukaYnp9qV2aXmItyJ1DGrUVHNJa9Y6juzF6h0ajIaa1A=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>rCH8E29/hwz6kx7HHtIM71qk2ExRRf4pbi8tpj6kFk6/iq4RgwUV9K4wT1s6mpXkcUlmrWOZImqau7lhqxI5Tvg7r9M90QIznIJ6HUUKqFpdMsjchQKZpMSF2nPEv3c8LwOiOUsJeseCAQxsEYQPGUrB96ZewGY4cvjW3RX2LaY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>7g9tOlB3Igm36r4qsdlY8vjjOpTUsA2GgBAjFWBDpTsDPBq8Dr3Zgd/Hv4almKsVwmulF8zKkgrXatpf6zZpfd3AZgA+XSdoz8Ajq32oWjsTIUf2UN5yN/fA4ittp9dUx0owm0sOwH6fxYR7Ilt5xU4yiH5tvD77e0tCZCKSUcfkiVApy3ClNjSeX7Ooj02T5LWDsXODtV+JA2EuTRIytTgu0TulGA/e0yfi+oOL+vAMMBzhZVJmjG5v1BTOX1LfLYRezfIR8D/0mca0m7M7Lq3X43pDF925Uj1T2+w+cK/xOcSXS/F2gXSI3CZ3ipSB/fk2tXmnboYfKC4oUl5WLxd0uvNeZQdujCYGwVKUyrUb1laS//pHZtWnP1fzMvTgoHuVITOUWwwPBmbW1OP0bj1wpiGWBUJSkt2kn+NhXD+ctBJG1pjvksdi1/eVD0N8lYARU6fC8H9e1NFj9WwmkTbiFZG2EFgKimyd6EpU/Ni1lb6bL8yosj4Cnh6aCKQl/rIc8mEpcUdvJ2ITt5hYs0bVVRtWNH1JmdAStKVhoC8KfoUu+7e9XS7GFzYOMoyT8YaXTujJmrQDDjxnIzzbSZc5G/E3WL9YrgIifM0gYg1L/32s87DvLFkqQ17avxt6HBz1pyYdgLVYRFSblnxy2+pnrgoNvbXH820xmQ6uOWAaH739+yp7+QtymDemh/aTNV3JwcMfY2LRsiJEEV1jfQ4bqnd32J5pGL+kFoYRfYyKB4GRhafuRbyN0YKLyyi2xzRFpQizX39DS7rFXB3BIyPlpyOPVseUAKVKUJKiixGvY6+TgdcDefg1z/FlDB2o53rdpyX2+IoXpJr10R9kPFfrNpnjL/L0WVCUzeUHtcA9lbEoE/17kKXRWqVnK2+iEnqiHeTvcXIAKcbL+DXpZLdTus1qOUapjnOCvv1KJv8UT9daMC4hpnLrVj2Wx8BH3ITQ5nqoG1X/KUdOUuBR8vBpDAMPgDqvqNBVe2yI6i2vCuOfdyoCGoZ/+Owo6jpFFYsrvnCOdmepWUf7OjNIXRnL0e+hUM/wQtf8YvBcFahmd6G1Z4ZbZ4XHYWfntWSHvwS6kjSZy2fWepXCGCOEsgretS/HzNQMuQU/EhIctCDYUxfDVxrdLuyvFxl2EblgInSgrqrLMP7TOOMTBDIwWH8jEQVzLBy97cuK5QaRK/OyZhxULGNDpw2YFWipT9fVGxr/N//eHa4UzY0y7kTm+g+d0lLfsx6ol2SeoUfWafrdIP7fGo3ae7cStEi1PomU0uzRQNBcwpySQ/RtDjIKUPq51ljrKIC1XXrfd9DdHp+qbk2z3IOZgqYdeG6yoTIwFz+WHsY9KJ1/0Qth0/TILnT7woPtSwPlVMB8DFvh6WffHJUwm7DhTzyvUilKrI7gn4g2jJnjVxYrU1uXhCedr7FqZ9cRnZermmCnBczARNSFpw8Hq9daIVUfVQcsRwkr2ECcUHqTs+kxEjkS5WzWDdaYXGRGHuih37hXqKuUr3d7U/+IUIHM9vkCDpDms1z7JE4ChwOG9rMxyVKy+pLUTmCa+Jg46PFmKjVkQrdIjaEmMFCsLV1gXXfuv3MvFE44T4l6d3Pdn4t6TYNh62WZ+dzNvKXy9a4uMbVYS/EHkB6I6EumY8Y1j7bIupJTbaoTjqyb4zIcOGLFQxuWFlwv0PQZNVMiR1HfzOgibqm4orqHgUTrrsdQpr2TGWmQiRq8TfHtAPpZpLKfnIkAoC5MH60C83+CFfwl+niKYnl9AS6snzNw+fVAnetCoirUJ98ro3n2P22FvbfWw7ZcRg4CN8/VKegHKiLfp1EBcl6n8gLyUuOoL3epdXI4g3yU0wkklzn38otzHDZT5zHFdbDXWx+4n4lcD1WAJkUQtV8VaShr/cgsvAbM2VZGnuMFVLsJpH9SaCfaIjjiSPWna7+VGUd/GlAdyYNXdNxwVlT0UXrC4ksNwswwVTlgyYmhtPsnjfNR9k5d8ADPjvKvtktK4kaohXDdFOxNd/xAJSmNtiju55Xrs1ZMlHRO5lbnoawzVqXKr7h6B7jZagBs+sZ8FbOciys1fmBYLrO1/xSXiV1mZwlAkFyWNX1wBpFNruToGevVJ/psyxwh0LNpA1Yv26WFaoA0QIMLILwm5c7sIduMCCFdr2nGRMUOEuWAqb3rMrTcVwi9xou0OgiRw8i1RyF/M23Wo36ewhtw6FKeBHbtbhYWUroF7lmfyCuu/WZ5T78Hr484kbUUc5iflei0n2B9LmVc1dZQGsiq3g404agO0tmsJ+WMxQeWuKJh/qxMuc3oZvOaij5STJqjzTQQqo+mqEvW/6jjEDlQf6scAcWxeQX+elbgtH7FR3v1t1z8tp6W+CdbJBCFB+62TvdssYfn/I4BJuAXNnNWWZdtjRJ7r9sgakYLeaNrM+M+l1srAnte92AIGHjKeJQ9PFiEwWVDbN89dKc4rZOdE9V7XhIzOOWOTw64t4OXtF5VkTpt4yqQ7NbHtke0zdHl4rcVKXayLxgX5cTnr/ortObpd/7gyBrXy3iLv7WyowBqDYY8EWkQmUXXrxDOI1s/ZbYzDD4zQEFinSV+XOrHtnf64XPYovr/B0OJLAdMjopQJpWRIzCTXLZzmdsMovKvrxmnfruS2AUGJYuistHts9jZqQWgxBz2zNRtQCueKsdASQ34gbHyFs4Tiogu4eSkK6hd9ssdBs1ztukYtQp3Fqmx/RZRTP7O/GpzA1E9fuqK/ijYe8S6m0fxzfr5ITEp0FHn8GJXlE2uEgndKcIvaAOVuNC0PjvFL4FOizHrdurvMb7wbEZqEN4iefYT7wAcDLyBbhj8uzqsxSAr+8eO9ABsq5d0RrCg7Gj/GtvRaO7xswzAIQ7bpdgvDBLjDlI5Lw934TrD6u+6fb42BwlEpeFTcsrYN9SE/TqsVQbTf9aok04VDhZIEMBhsd1iu7/ATmr+p/l83ifT8h4nMOz65ZhJHBdH4stvKaBRdhmUihW3H03lQqNHPWbdip0jfxTSP2l+fGeNCVrjvmbypKhLcZS8qoZVSAAkfyaRuZewIygO+zb3m5kNzMaEj+RJYBLKVD+WuQJsW2xWKgYaVgpwokVFZHDWqCNUP6oBL87j6EA5iz6TfmjoSG7A37cWT82ZLmXZ4y2VCalY6P4icdMUe1pGtVCZSM4QbuJ19P7twUiOqGxibnr0H6Ha0D1EvCeg+WTob/9eApvBLU+oJOLcLswimmZdkmA7bL2cUy51Enlb3pDD8tIhFAAJbvxUVW+1AUBfJwKpjfBMZuttN/x9qsxDuhyG5Tntk/fU6HbmFBUt3JlS1a5Uxsx0gzsmqGtJasuXgVGllQHfIC5aUUDfP/2YPQw35o5588pSQiwXibSPRWoe5db+mpyMoh5BoUHhpZgJ1ubUg43vExL26gkeruBnX+g8HtKQc/bIs0IVy9lWDq9obXSQEGCF/XYGe0sfjTPrccnLL+MeLXEenuX0MdqXfPcE1ndjfS4TJnkeo6tai8Am4k6stWfxhnvgemCzkoXG4B2VQxMRIBF4w50mj4oliQWbqAHRqlDkyGnFaxVud5/nMNQH769otqlFeqAHCTk64UuLH3LtiZSq3sSu+6VS8+MlIWmNwhP6GgdLh7C7O02kIZEMI7bB+MhYfp7/Wpyftv+yNSve5hw52kbl6IyarYJJQc1fK06sat6yAX+TgupDB0dQU/nGVn6aPTYny+H/LeyUWXhDTAqD3hrl0ScrTP1pV7AotbuopK/7Scosn49yXU25ytXGSsJ83cCt6T/tZsICJKiEBZIFrdbVB8BEyyh8x4wLniz8p8FbX8imGIf+/jBdrRc9hjZS2MEpOFJUvZh3t7VIZb1bTkGUiGKsl1VEVWZ0xrQVggye+Bp+bWj+cnBcGU8gGYPoPjfc8jrRXS4lyl089XrNdp9UgpfaPTwE10/3hNcF4rPlqBmwBrOavVDaFL2nc/INFTs3wbz/67Ax4ccin1CEXv+0JDMl5Pe3+9I6XWFRzZKuvHOhF1NK4u8N7jLsOizcrSoXVcWcTlHxQTmCcPlBTf6wYrB12OiJWgLPehZ4f+JzHU1/2dfMJLe1dMW5yh/FqpAPhwvu29Zys3DKTAroumz9hb0RQiBL82HE9a6Q+/jSPuVD+mUgmR/AKRf4IuNvBGrEgQtyCFpDsRdg7ph+JHdKmWBEcRBB+bnWBR2b1PEoFOR3bK7i6sjnOOX1xuXgP/yK0qrj+6C+DW25mH9udAirxL7E6QBa9pBbbL+F/K32iPWnvmE+V8ncKVsWujVH5ms0mwdMdUHqNMlNvOqQQN3de2R7D5YLQPfrYHiJ1jpy1AkIpKY5rxGpwZ3MeJP2IC96l1q9/30OlrN9OhUXVQ4C4486M2exzJ1wNNCBdvVIOaiAwAfSflUi7g+R2fYI7eBJ0DQnFcnyhS9rgl5CkQMNTnSCEUTAu05eOSDBOP187oCPT4R2h0T+glccmDmVHB0rZb6qRXllhKgBR2WfGeX+CtgHwh7ZuGSwu2yQP6RSk+7RmPMdZeRnmwiY0TckINAe/Z/Zp4Jq9fVQBsXsB3jWoYMCbAKZqLRNt9m9tnT6TEP3xYwdAD2wIF8PIq77z2oX8iDyX5ZvgghN3XWJAcS+jkBRmfGwad6TgvNYnjUW/H9gXZwGuAkhPv9TludnnN9Gh3Ix0Vre2T2OUUBcU3FNkTJ8X8yIzRtTBpI5AR+JvXiXuxerP15Ri5X5YYF0iZdeSVuekHgap8Ek3Zi66vyYd25eY/28xJioqtDntjcgUkquZNcdlqrIjQ4eQEgQq5H3XmmkAJvux51Wf6pbOzezyLvLuz4aKCiue8hn34HM1BRsQVgAOatuYhWqvJIUTz7pDI/wrMqgoMOO6iswmH/9pHjFiItbIgVgqnNd2PZPZNpxde/cAkssZrtpHMh0Zj+RJGQtNvviEJjd+19kkXcK9oQGaIcInfcob1KBd0MVD85EA2uwst2ZysUywnGgV8PCxpY2/os5DAKRgY2pAplJUNJ6rqDCF4MMxJQUB5POhwQMhKCAvb+q58/4wj/P1YyPzxwhLxpTkahQcah84yie3nF6uKpiaXT7mCPecIMEiGksnEpMH2A10lTZ676vGhF5Apj/hoY1taWYroezl+tuHB1ZwXiSiWxX/ZUQV00Oo1oUX6q3aYW3BUPxFGy76cRiRoJ17x84gt/z5LTp5dFyCfgLbuT0mTgctE3G/zaJzBOPn7fQwgddM120SHWzIRr45ieLmZaKsR9u7qprqGRnQqHJAf6bmYiPGd+kYM1TsEPmdOoFgJX06nWHfoZ1G+kwCjG+mQwncX46ka+YsKcpJXicYoIw+hIVX9TG0Gvuwq/DpbtZBy3oSrWxEfEwc0sW0ejpUieVp/5k7xnpy2QHFnP74CHw0LX5P8NEHJ/TLZYHKkye/c2gGGbOhTB7UKRgS0Puzi98Wr1BK7QBCB0ZH4WOsY4=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx484eeab7-0631-627c-852d-2e9102fc5b42" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx484eeab7-0631-627c-852d-2e9102fc5b42"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lPq5K5ovYkpiV/TNqaTl62b/gqY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>sbrjxTArRP446wByC0TMtL/g3sZz3edY1EsZcTXPEmT5LrpSz2tBk0taJQmbGdHwFpaiMSRT+BVCFaLuhy7OG6y/3Ga/F0Poquleph98xn7rN4hoKGparYGIV56CcVVtpJqVO+R43XVBTEPBRnswUIcIpTcLVWkqVjxgcFOEXCs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FeaygY5enajaGNvrDEAkui4+G1ybFzKXfLgMfPwwP1o18rr2b/cEV7kCMhHgmXkqBNanl4a9XWZVRugxdhIn8/skx9KK7MuRkWPOo2DS9BR4YEq/JYJfGA9kcozfoQyU5U73rtPXhkfw7N4DUCxOcEQwWWU2qjh6xrmw7Lyp/Sc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx189b78d7-ca41-0518-4895-ed037637f0cd" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx189b78d7-ca41-0518-4895-ed037637f0cd"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>OM+pIgPd7xO1SfjQXLtqXBDXyZo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CL1ClHowwmoE/tUW36H6E9GrbZmL/+uxTUsjntCFMKaYGEPAXMtxupAKPHUUMSPojomIB5vQjvCi24k61Au8jtNQc4scvEsfWwUCx476VyzIsCDPlHd1cgISMdjhgtkle+YkjLEAooCflXiZTEbrbmmFlVZihYm49pOPCTxJQEM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>rCH8E29/hwz6kx7HHtIM71qk2ExRRf4pbi8tpj6kFk6/iq4RgwUV9K4wT1s6mpXkcUlmrWOZImqau7lhqxI5Tvg7r9M90QIznIJ6HUUKqFpdMsjchQKZpMSF2nPEv3c8LwOiOUsJeseCAQxsEYQPGUrB96ZewGY4cvjW3RX2LaY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>7g9tOlB3Igm36r4qsdlY8vjjOpTUsA2GgBAjFWBDpTsDPBq8Dr3Zgd/Hv4almKsVwmulF8zKkgrXatpf6zZpfd3AZgA+XSdoz8Ajq32oWjsTIUf2UN5yN/fA4ittp9dUx0owm0sOwH6fxYR7Ilt5xU4yiH5tvD77e0tCZCKSUcfkiVApy3ClNjSeX7Ooj02T5LWDsXODtV+JA2EuTRIytTgu0TulGA/e0yfi+oOL+vAMMBzhZVJmjG5v1BTOX1LfLYRezfIR8D/0mca0m7M7Lq3X43pDF925Uj1T2+w+cK/xOcSXS/F2gXSI3CZ3ipSB/fk2tXmnboYfKC4oUl5WLxd0uvNeZQdujCYGwVKUyrUb1laS//pHZtWnP1fzMvTgoHuVITOUWwwPBmbW1OP0bj1wpiGWBUJSkt2kn+NhXD+ctBJG1pjvksdi1/eVD0N8lYARU6fC8H9e1NFj9WwmkTbiFZG2EFgKimyd6EpU/Ni1lb6bL8yosj4Cnh6aCKQl/rIc8mEpcUdvJ2ITt5hYs0bVVRtWNH1JmdAStKVhoC8KfoUu+7e9XS7GFzYOMoyT8YaXTujJmrQDDjxnIzzbSZc5G/E3WL9YrgIifM0gYg1L/32s87DvLFkqQ17avxt6HBz1pyYdgLVYRFSblnxy2+pnrgoNvbXH820xmQ6uOWAaH739+yp7+QtymDemh/aTNV3JwcMfY2LRsiJEEV1jfQ4bqnd32J5pGL+kFoYRfYyKB4GRhafuRbyN0YKLyyi2xzRFpQizX39DS7rFXB3BIyPlpyOPVseUAKVKUJKiixGvY6+TgdcDefg1z/FlDB2o53rdpyX2+IoXpJr10R9kPFfrNpnjL/L0WVCUzeUHtcA9lbEoE/17kKXRWqVnK2+iEnqiHeTvcXIAKcbL+DXpZLdTus1qOUapjnOCvv1KJv8UT9daMC4hpnLrVj2Wx8BH3ITQ5nqoG1X/KUdOUuBR8vBpDAMPgDqvqNBVe2yI6i2vCuOfdyoCGoZ/+Owo6jpFFYsrvnCOdmepWUf7OjNIXRnL0e+hUM/wQtf8YvBcFahmd6G1Z4ZbZ4XHYWfntWSHvwS6kjSZy2fWepXCGCOEsgretS/HzNQMuQU/EhIctCDYUxfDVxrdLuyvFxl2EblgInSgrqrLMP7TOOMTBDIwWH8jEQVzLBy97cuK5QaRK/OyZhxULGNDpw2YFWipT9fVGxr/N//eHa4UzY0y7kTm+g+d0lLfsx6ol2SeoUfWafrdIP7fGo3ae7cStEi1PomU0uzRQNBcwpySQ/RtDjIKUPq51ljrKIC1XXrfd9DdHp+qbk2z3IOZgqYdeG6yoTIwFz+WHsY9KJ1/0Qth0/TILnT7woPtSwPlVMB8DFvh6WffHJUwm7DhTzyvUilKrI7gn4g2jJnjVxYrU1uXhCedr7FqZ9cRnZermmCnBczARNSFpw8Hq9daIVUfVQcsRwkr2ECcUHqTs+kxEjkS5WzWDdaYXGRGHuih37hXqKuUr3d7U/+IUIHM9vkCDpDms1z7JE4ChwOG9rMxyVKy+pLUTmCa+Jg46PFmKjVkQrdIjaEmMFCsLV1gXXfuv3MvFE44T4l6d3Pdn4t6TYNh62WZ+dzNvKXy9a4uMbVYS/EHkB6I6EumY8Y1j7bIupJTbaoTjqyb4zIcOGLFQxuWFlwv0PQZNVMiR1HfzOgibqm4orqHgUTrrsdQpr2TGWmQiRq8TfHtAPpZpLKfnIkAoC5MH60C83+CFfwl+niKYnl9AS6snzNw+fVAnetCoirUJ98ro3n2P22FvbfWw7ZcRg4CN8/VKegHKiLfp1EBcl6n8gLyUuOoL3epdXI4g3yU0wkklzn38otzHDZT5zHFdbDXWx+4n4lcD1WAJkUQtV8VaShr/cgsvAbM2VZGnuMFVLsJpH9SaCfaIjjiSPWna7+VGUd/GlAdyYNXdNxwVlT0UXrC4ksNwswwVTlgyYmhtPsnjfNR9k5d8ADPjvKvtktK4kaohXDdFOxNd/xAJSmNtiju55Xrs1ZMlHRO5lbnoawzVqXKr7h6B7jZagBs+sZ8FbOciys1fmBYLrO1/xSXiV1mZwlAkFyWNX1wBpFNruToGevVJ/psyxwh0LNpA1Yv26WFaoA0QIMLILwm5c7sIduMCCFdr2nGRMUOEuWAqb3rMrTcVwi9xou0OgiRw8i1RyF/M23Wo36ewhtw6FKeBHbtbhYWUroF7lmfyCuu/WZ5T78Hr484kbUUc5iflei0n2B9LmVc1dZQGsiq3g404agO0tmsJ+WMxQeWuKJh/qxMuc3oZvOaij5STJqjzTQQqo+mqEvW/6jjEDlQf6scAcWxeQX+elbgtH7FR3v1t1z8tp6W+CdbJBCFB+62TvdssYfn/I4BJuAXNnNWWZdtjRJ7r9sgakYLeaNrM+M+l1srAnte92AIGHjKeJQ9PFiEwWVDbN89dKc4rZOdE9V7XhIzOOWOTw64t4OXtF5VkTpt4yqQ7NbHtke0zdHl4rcVKXayLxgX5cTnr/ortObpd/7gyBrXy3iLv7WyowBqDYY8EWkQmUXXrxDOI1s/ZbYzDD4zQEFinSV+XOrHtnf64XPYovr/B0OJLAdMjopQJpWRIzCTXLZzmdsMovKvrxmnfruS2AUGJYuistHts9jZqQWgxBz2zNRtQCueKsdASQ34gbHyFs4Tiogu4eSkK6hd9ssdBs1ztukYtQp3Fqmx/RZRTP7O/GpzA1E9fuqK/ijYe8S6m0fxzfr5ITEp0FHn8GJXlE2uEgndKcIvaAOVuNC0PjvFL4FOizHrdurvMb7wbEZqEN4iefYT7wAcDLyBbhj8uzqsxSAr+8eO9ABsq5d0RrCg7Gj/GtvRaO7xswzAIQ7bpdgvDBLjDlI5Lw934TrD6u+6fb42BwlEpeFTcsrYN9SE/TqsVQbTf9aok04VDhZIEMBhsd1iu7/ATmr+p/l83ifT8h4nMOz65ZhJHBdH4stvKaBRdhmUihW3H03lQqNHPWbdip0jfxTSP2l+fGeNCVrjvmbypKhLcZS8qoZVSAAkfyaRuZewIygO+zb3m5kNzMaEj+RJYBLKVD+WuQJsW2xWKgYaVgpwokVFZHDWqCNUP6oBL87j6EA5iz6TfmjoSG7A37cWT82ZLmXZ4y2VCalY6P4icdMUe1pGtVCZSM4QbuJ19P7twUiOqGxibnr0H6Ha0D1EvCeg+WTob/9eApvBLU+oJOLcLswimmZdkmA7bL2cUy51Enlb3pDD8tIhFAAJbvxUVW+1AUBfJwKpjfBMZuttN/x9qsxDuhyG5Tntk/fU6HbmFBUt3JlS1a5Uxsx0gzsmqGtJasuXgVGllQHfIC5aUUDfP/2YPQw35o5588pSQiwXibSPRWoe5db+mpyMoh5BoUHhpZgJ1ubUg43vExL26gkeruBnX+g8HtKQc/bIs0IVy9lWDq9obXSQEGCF/XYGe0sfjTPrccnLL+MeLXEenuX0MdqXfPcE1ndjfS4TJnkeo6tai8Am4k6stWfxhnvgemCzkoXG4B2VQxMRIBF4w50mj4oliQWbqAHRqlDkyGnFaxVud5/nMNQH769otqlFeqAHCTk64UuLH3LtiZSq3sSu+6VS8+MlIWmNwhP6GgdLh7C7O02kIZEMI7bB+MhYfp7/Wpyftv+yNSve5hw52kbl6IyarYJJQc1fK06sat6yAX+TgupDB0dQU/nGVn6aPTYny+H/LeyUWXhDTAqD3hrl0ScrTP1pV7AotbuopK/7Scosn49yXU25ytXGSsJ83cCt6T/tZsICJKiEBZIFrdbVB8BEyyh8x4wLniz8p8FbX8imGIf+/jBdrRc9hjZS2MEpOFJUvZh3t7VIZb1bTkGUiGKsl1VEVWZ0xrQVggye+Bp+bWj+cnBcGU8gGYPoPjfc8jrRXS4lyl089XrNdp9UgpfaPTwE10/3hNcF4rPlqBmwBrOavVDaFL2nc/INFTs3wbz/67Ax4ccin1CEXv+0JDMl5Pe3+9I6XWFRzZKuvHOhF1NK4u8N7jLsOizcrSoXVcWcTlHxQTmCcPlBTf6wYrB12OiJWgLPehZ4f+JzHU1/2dfMJLe1dMW5yh/FqpAPhwvu29Zys3DKTAroumz9hb0RQiBL82HE9a6Q+/jSPuVD+mUgmR/AKRf4IuNvBGrEgQtyCFpDsRdg7ph+JHdKmWBEcRBB+bnWBR2b1PEoFOR3bK7i6sjnOOX1xuXgP/yK0qrj+6C+DW25mH9udAirxL7E6QBa9pBbbL+F/K32iPWnvmE+V8ncKVsWujVH5ms0mwdMdUHqNMlNvOqQQN3de2R7D5YLQPfrYHiJ1jpy1AkIpKY5rxGpwZ3MeJP2IC96l1q9/30OlrN9OhUXVQ4C4486M2exzJ1wNNCBdvVIOaiAwAfSflUi7g+R2fYI7eBJ0DQnFcnyhS9rgl5CkQMNTnSCEUTAu05eOSDBOP187oCPT4R2h0T+glccmDmVHB0rZb6qRXllhKgBR2WfGeX+CtgHwh7ZuGSwu2yQP6RSk+7RmPMdZeRnmwiY0TckINAe/Z/Zp4Jq9fVQBsXsB3jWoYMCbAKZqLRNt9m9tnT6TEP3xYwdAD2wIF8PIq77z2oX8iDyX5ZvgghN3XWJAcS+jkBRmfGwad6TgvNYnjUW/H9gXZwGuAkhPv9TludnnN9Gh3Ix0Vre2T2OUUBcU3FNkTJ8X8yIzRtTBpI5AR+JvXiXuxerP15Ri5X5YYF0iZdeSVuekHgap8Ek3Zi66vyYd25eY/28xJioqtDntjcgUkquZNcdlqrIjQ4eQEgQq5H3XmmkAJvux51Wf6pbOzezyLvLuz4aKCiue8hn34HM1BRsQVgAOatuYhWqvJIUTz7pDI/wrMqgoMOO6iswmH/9pHjFiItbIgVgqnNd2PZPZNpxde/cAkssZrtpHMh0Zj+RJGQtNvviEJjd+19kkXcK9oQGaIcInfcob1KBd0MVD85EA2uwst2ZysUywnGgV8PCxpY2/os5DAKRgY2pAplJUNJ6rqDCF4MMxJQUB5POhwQMhKCAvb+q58/4wj/P1YyPzxwhLxpTkahQcah84yie3nF6uKpiaXT7mCPecIMEiGksnEpMH2A10lTZ676vGhF5Apj/hoY1taWYroezl+tuHB1ZwXiSiWxX/ZUQV00Oo1oUX6q3aYW3BUPxFGy76cRiRoJ17x84gt/z5LTp5dFyCfgLbuT0mTgctE3G/zaJzBOPn7fQwgddM120SHWzIRr45ieLmZaKsR9u7qprqGRnQqHJAf6bmYiPGd+kYM1TsEPmdOoFgJX06nWHfoZ1G+kwCjG+mQwncX46ka+YsKcpJXicYoIw+hIVX9TG0Gvuwq/DpbtZBy3oSrWxEfEwc0sW0ejpUieVp/5k7xnpy2QHFnP74CHw0LX5P8NEHJ/TLZYHKkye/c2gGGbOhTB7UKRgS0Puzi98Wr1BK7QBCB0ZH4WOsY4=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.