Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxd2e84646-1575-9b08-e651-c6383d6a5642" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd2e84646-1575-9b08-e651-c6383d6a5642"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>5fkYoKvLlOImYVOkY5YGyU2IlSc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CrSL0Fp7nOgFXZ4EI8XLIWfbwD+6p0lsymvPlExTLsG3eFnGawBHU4DrGdcNSUfyqph7NzcnVEks83JwIPzPhUKIUFKfQTTAy6d4+DH0XPa3k8+g8njnoN4FBEEzJoD/thoja7KbYuvS5STsPUgvACVO4fKyn+/s1/5bwuilL7o=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2e39979e-4d6a-93ee-cab0-159faf307d80" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2e39979e-4d6a-93ee-cab0-159faf307d80"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lacBhEwJ4lT1JtiI1FleszWIM28=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>IwjwDpgczFweyxZCPEe/zCobpRWCiKy0ZOBBZgC6sH3Bc3D2WjakwD6jOWgZzZ4WMzmkcv8Pa+cJP5wCQEmrmJV3KFo8YBwzmMLB5saICtVZDhW7Bl4NfWgwxyeD2Ow+M7ZezlAb9py5F35Hb63jScGhkNSxAgRAkj9mnX9KZhQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxae70bb7f-820c-0886-f559-e0935b437d59" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxae70bb7f-820c-0886-f559-e0935b437d59"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qlXlg/7fHJdZXyQyVcImuslEJZc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>xgPFtZV8cU1wyb8HnKIpcwPibw4NmdMi/YF/eEMVVHsBshzrYcyfRGkuyaICLOZ0ipFM2lTULbYO72ejH7StvjXaeiIAwMd6dzo3bherfrNvBxalXyut3hYNKCSHdVU797VOAGbrOnbEt5yXgrRAh6M8Gu5k9t9zUoZPi6oY6QA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx915cda69-0e60-297c-e3a7-5df31ab92fea" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx915cda69-0e60-297c-e3a7-5df31ab92fea"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TBKs/0VRpJamJTd4KTI4z3c1i8Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>L8CyfLyFS/zBRHYDm59Nl5SOf3FXLUD/21kwnLRzwk5WefFEBgQ2DAzt0b3L9tOn6Hor5TWTfzKfqYug7fVQHzU2yP+bJ5gG5yuXUMaZE6SmifcS+cHA0jvkP7eF9a7AkoiEWVnvuyeqbRRWQCT6msKirlH1R1H94pLZYwkMS6E=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KlZMgfIS5T3PYarbIVNgQR8AHEGhKOxNxw0jgkkvZN6CvCzrGq/3x4qw0hStUIvW6JEfkMkGmQyjomLjspFoLdF+E5okxzcq6UERh41oUVIIW5Mk9RusdvUa7RRQpziEamXYA3NaKfDN0tAhvFT04OUs8ZEAXbXnXJk55xMSsKs=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>BwAwkY8+Bh2qywqdn9MKKwhRyLW1XpGcNhGBKLWPwlqUL4G67kqpuykL6s4oDn7ejOhwk3E4QmikH2fC1pq3+FkDCmMeUZbDC+pob1jz5DBDwCQOO475y9IiQrBf8/PdQ19Y4cB7Kc+kUYsMKDdnUWrypeA64GdWBxGrYgW6Vl4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx78ba048a-1fa4-be33-657f-a4f4d16ddc2a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx78ba048a-1fa4-be33-657f-a4f4d16ddc2a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>AG8eXC+aWj17K1nnFVvctS0B35Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>UnTRSrKI7Kagnt1UvpUl9RvnkynqIHiCEnGXvctieYM4pKn0cdsCNeJTO5Tfeqei4vy7icjQQ71i0D9og7p1TXZ5nkjGQ/GDtoGBeafJ8a62e2Ww5xsF2smYDI5uYBgWLl3/EZhpC6vsvne5FIKWNYDZY05IgZjLTfqD9SYunbw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KlZMgfIS5T3PYarbIVNgQR8AHEGhKOxNxw0jgkkvZN6CvCzrGq/3x4qw0hStUIvW6JEfkMkGmQyjomLjspFoLdF+E5okxzcq6UERh41oUVIIW5Mk9RusdvUa7RRQpziEamXYA3NaKfDN0tAhvFT04OUs8ZEAXbXnXJk55xMSsKs=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx55326707-3b4d-a256-e583-52a224558e1f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx55326707-3b4d-a256-e583-52a224558e1f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>dc9ljYLFM25PHjdSjL9IcRWHfWM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PSTGGqcC+jSEfcg+wtHYRcS77pPXLvDysmwkrLU9iQzUexEsaciU04rcGKZIBNjv5WJT3xfGlpWv52dxscil3TUR4Y0DPfNYzKEdgPUBYOxAOF0Ucj0Nmgj7huAFDT4R1tKZ3Y1+FiYu507/m086uJ0L3+4oG8sDlpoUnsYCxp4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>BwAwkY8+Bh2qywqdn9MKKwhRyLW1XpGcNhGBKLWPwlqUL4G67kqpuykL6s4oDn7ejOhwk3E4QmikH2fC1pq3+FkDCmMeUZbDC+pob1jz5DBDwCQOO475y9IiQrBf8/PdQ19Y4cB7Kc+kUYsMKDdnUWrypeA64GdWBxGrYgW6Vl4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>YFouc8JXkWQK6sNBkgTGc8UOiQX1wjMcdvY9RbjFfkw8W2hOEF+l5cMpykTuyz2NEnYANH60zPxQ0bjAIZSTbxN17fMWj3zjYIoELyLsIfVRtVeAMkRkVMkAlRYtafA3KVWbEkZjckVJa6Yx/a+JcF8Om44vXqwvxYNQakOSFsoxYNslsnkFGqXapmr7kBZy6FmXXdaVLkUtCqB67Xzwwhml6QThhlRE8nzGiRky4VlnDFQt2+Fq2D7LhVL4n9M9IbR+qgGZTXLWtw/elKJYdbWAX9kfFku+g3H/bSJnSiUgEHVA1ND9qNL+gn5SKHLgs025mRWV9YYZRBhyi/5Q9IVt0NPbmremyIee+xCBBiFqouE9nft8Xj8KkTSTwzF2uSE1DPlskhHSdaIpSJR85bz/ttZBWTYWfJ6bqIPa+b7izcm/8QarEFq0zRr6JL5YoTixCynLNtSAs8dIDs61788Mtw0uLDWCWyQ9BcK8qNLKrSQ1/GOWns14wnc/t0KBdIlmwqPzQ2H0CSL3iC+KgfbYjqHRq5rIXpCj9VYxi4IjkONDNtREM3hIaZysGfvT3IQPkiscTiEbAMqif9+97Z/lXrbpM3Ns6yNit17axT4bVlDTuTpPPLj5l2H1oD4t9MJfqaat5uFyf+a/8M/pPJTbXytA7/ejKqfQLXwAlV7a0RTZL3I8ccztz6POyEcOKUmqrd0J5uVLX905u0jmX+GYfpVla0DtDflgBSFO8YETAULBrdGw+QG25CT+tTdcfL8j7i9qvhrZqGMUu5TbM290gqIOkAw+NzoG/otbWONbUr9ZagTqkdkwELUQJYHs3Eux6omhFhOkCivsNfxxX79Pb2UamDET1tL1EVsh5fBVe59CgUAA4mRm+pkvpSyOmwQoXzQ91n+dPoP87XR9mXs8IJOeD69MvcgHntDF26CBvzb8LwjxWonzI4vBsSPMgHFp6NhQi7UmVCj7/PjBsbPDdup7JYQCB/4LXdSu772vvLUTVzUeKuFvmnImG/BWf6TKkm0MhpI7/UUQCKmAXoEKN4WI3xPTDV5JeInMqqcuzO3mEYg8xmcWD/7Gs56IaqS3+0On4Mlf65JAazB6im9Kf9+mqYCSZ+/8RzR+MPD9s8GjAtJjZ+UBL+FZvYimMe7fzhY/fnVD3zYU2AOPN5pUANH5NV9ou9mZIN9cX5KOH4It6r0jeO6MExRXbhhibNUaveb83SG+sB/BISExf0cL7sfy6QdyG4+N8doIkYAwbuuuxkR5RFPHKsymiTdTj+BAfCOAV4VEWS7Y4jQpiPX3JAoq2D0mJL1gjaUZMzDc6U3i4zoXiJP6koWLuW7ipx2pUjoVcMVh12/xdhaz/Fk1XdA/BKlkxNN+3Kwjz0lsMmZufNtH1N6PkFk3VagOZkoW3VzYr+kufJpwkRtYMU0RzhQubsNJqNfW+Jngpds8dk7PUMqesoiKDqP69S9tdyWdya72qo6RUT35eLJqWJwzSEXzcLDA4uiCzaZfO/Ryka9cQJBJxrEBAh7yrdDYjr6SvdwITFyhE+l9b5OmSto6n6a2Y7gro6tTfIYfu71jPsSh4+USOX1TFkG1gCL1O2t906cHG9ZMNDN1/5VORenHPkADPpojYj82qTwqy0jNf5eVUpjwY0MvIrvNl/MOgeECasUfC7Gun0JBkn+m2Cy+P8Evxc34w0MQbbI/QiHNM342J6mAffTpzXYw+NeKGxyvNIvYecoAYORhd18saQvxXBSnPdlx3hYyiMEZ6CLUcyhMfpAZydwEeEYGFtuA6KNMVyBtrkNxlPHwURSCBSWXLhfBvvik4cmD/4xhx6ke9abAe83LZaH7YupNlSbE4dXlifMBrzPS8X2RR4o/yDK2YTO0BCJimlYjrvJYC0x1kbk1Lzt681q2AuIMSJSePMy3AWzVqU1ohIzJ0GUsjBPX670H+Nhhpqcu47HjUz9Q7moSUDXzmUu+93TC8xLpIiaG71PyhIdlpPNZbsHOm6h/y0X3/T55Cd2SznJmXoS6yuAZ7SFIxt1tuW1e7OKswErOLMJmdhjhJbkAjFOdXmrdYAqzOT/enJmzw+XFZ2FYtx4puBHOpUngBp6R70SdfaPREgnVojA+FETdUiRMAMIDURQnxsglmAcRteN/n/8YfnrBtkN7rkS+KtmDu3Vw3cEvaKKYOUOcV9u8ugApHJLSW8BSZFQx2SWqHINKhy7eCZChlJcWbP3ZkcFEIMQPKiClgFM/g5KU1ZrFHSwyGfQJJRdYGKVOlouoSN16MYR4LC3T6Eaxl6kpp9dpaJT/csgbYDGQ8m68tuUvp5Bkyg+dcFoj3B812f+1/QnWVU7qqP5mKoLuAU6P6pN6ooVTuh52jmBtB0+zd//LisnV+NkgHw+uHrJDVpAN8oLtLvaMWrK5HZrME+XIVdVsPB8AgZmtZ+a6gXEnY8ZFTT+oNf1w0sArWbJqilWaspUgOgrBF4wZGnBreH/7+9MrNqKmrCKQFitT+x524N8fuEmmeKhJuE/hv96CTIsrNWzqarXCUX5amyhqwMSmJ5nbmJX3zAN+iCJj+ap7IdX2+yiXi9iO8EqOryO4jdL6DZp0rFftIluh3MiKrLYDLJVvjPKzTA1Go7y5bd65nXhkExNs9xtg7ayMc/vJ+6f/OBoVp+9ED7zOOCCual3qiAFqf3TS4VUswy8YY342dg0wtH6gvykdjzL/Ad1aVX0llFZuWzhCS3PR+/ftK8n5xvtTpSLHQBAiwuAfHsae3L3DjcE5aDyyaMxLZYB0kcSrjkIqm0THCJWGOsfRoJUjrF741iZcmC9nZktvbGQEtK7/CHr/GWNysWO0ZGHIlFjkMDkWf7LowrO20yJj/SxcKbxbW2CU9snQTGGmc72oJNTiS3uube8JkgaW6v1Ui89oP0en2ILi50+mHNbKB5Zdv0RivKMWBQ4dcs0zFLcXU0fp55h7rMmE77H6kZXlG0jJkIOJSj1845DD8nm1FNyB+k//1xkAq7P2pJFKQCK+i/inaSmxPr76EOa3d0+0AywLadyIStrcxBWOG+Tq+pYf3ugRad0w3FaSa3Gb6juewglFbf/mphmTZocL4QmI29F+2XS+x30d9YDs1cjXPfyjzENQelXJ8o/9ABJHMdzXlYSlbNs59lBTosKDGzTmlPFJudGTDBkAfWPCMOUOVr3+IZVUy6VVbnB2cwIVpQlksW714wdvNcV7wywyKAM29vsekahG4N0znYmj3XVZNM76sD6Q4MzFxIMv+/ZMiyuDVCAXRny8L4BPagWv5OlLTUgYt9SnZVuMUYgzlnAHlas3ERl6DQ4jEv7rSgCH3hPKljOOa6U/tBwZjso06F/QPvGJZ+thgThzTVfncWOjHzmAhtasSC4k/BxhT83FjYYHKiyXNv0A33E0oE2OxuhBcVz8JrEn1WDe4GyANJzgy/eD+ghhDiQQGFEMhj+3kLaE7S3/x2pPav/McDZI/UBB5Mw8aAmRWVYxFSRCxmM0vn+ZItinf/GmTpI0VYmZYRzUobLDLVLiAokuoS1ivWhcWc+BWIEgIf5+VK4pNRxtjy333wMf9aTiO8gPFyjv6S5YrBs1nuVHoOnYqd0x/cwFTZhFKqwFBkj9SWK3RcAC9881pHXVCqZKVeENvBHds0cPWfLf7zrpydw1QcCGkhp3G63TpbyP2bLp2bNhYdJjhcDDht7WyTWgr+HuJrWIKlZvP5J8vCVKevBg4zmE1si7MWvHgp9+FQwVzD8mKmC248rVT37NLPYuBvXC2kaDyilsVff7zQFXfDCtu/U/BUT6Un3GLCev+AAGmDeIzpQktmWz/nfyXL29W7/5R0LfplkBeq9u5UPk9ntXgtWK7WsSrvz0fb4mc61PfZGgAzrN9ZZQ+Sfs6mTrdV25VSqBZpgLgxG18dOrv0nHZJrd9kvMlxF6p8eybVNhilMy3kq4RqlOuFSZ0diSDLXYLTc0iaYH7oFGYtc+6gzf3dtP8csYKcHrnckym36ykJQ7w5yiElDrwylEf68/uG/WVCw25IukQGlXu9RQ1tUwEK9bpijxspYKMhFG83GsBP9etbGPxUUpvbBvnAgXv6TMgk6qzqlvsZWOHTLmkXEggBSmd2SzzSncX88//7QDv32hIzlkOVDQ+csOOZlUBiQD2nFSYsj0fUjIpd70P6mu4/kCWUYa3I5m60igq6yXXNqigEuGXKpsCc1XL9yNXlKxFaTHwz4Zqf+DFfw/uBAK+ZjAOvzlLc6NoCY/QRQFyj6DjtOfmrLYu3YNDF7rR0+tn3At3I5xZ6/u6dFIMglGBSQ8s/fXWhssKnh5v8Z9r5MeDa0TnwRv9t6sAjny+vIq4p2YQY3D/huzbjOQyxjlfmjpD6KnZczwqO52twnEs9aTMr7C4MHmvFCMBBGN3NYQXqwzhCw5Id8baapHHWUWhgEjpmk0eccVPpCb/3b9WdhgXDA9O5PwjVTgpuF1O0kjXFg2L9cl2/CMD9HjR/AM8o10G2iguIHkfvrrXXTdsSMNihifv415771rz7rlWCACnmG0WAqPKPak0btDlGSfsqOT6a/vSax0qC9lzb42h7ona96vfPu1zUA7zOqPb/qd7ipP/xZv7teaHQiuhoUDXR2cwUeoYnZDq2Hn71LY5ZdJ48TbhxvGSpTmkQTvRA4GxV8/6ysqszs5+JtM2DretWaayeO91of0ByvnruJSbcddnWX7j8xeq4uI4lUQTLTlL6tv9N34SZngyeMWcOvfgFsg0Vu4bC7oj6tXgpQ9sJsvgTvcnajYr7mjk+EPMS48qanYi7FW4gxvvg7cethc5OUxq8mU/rxvGL+fRzgUK3x61j/iibudPFmReppL5+WFNkXz3qZHIFyYzubcKAwHk0N17rMoKEANstzN0wngouIDB4a9WlpVNKWHuJZ0wu8Avlcp9bEMpeQCO5wUuoaLpda8xgeJPdvk9+qFCTFipUJR789+iOSS2sqoLICpDtqzLDz188DMKsdzYcVD39D3sWt4xDXOeGHCYifbHqGyObygExijRRiIcmjJwek7dnCms6xBoB+FsNOzKXB9t5xgWHE7oyQGucNXxD6ZjJr+M8p/b6EiLKcJQxpjjBmA7NqZG2MO8qdAFyFe+g3fUNWi34iLn+C2MyMNFtj0lNSCRT377XUdp4X8I9Ekd4H9oEEsjUFPTUeEBQ/jxK9mHqoMjV4kLuWMbjc5vx7xjDw1u9DLUCecvxuc9DV8desbe93+mJDqXNaY9Qzpp7RhJFWVJbxy7caTVbuR+/HHEADatcSOJWy0calTLFNlRH8BGXCKwUNG18LXaovUyky+Vt8ajNXGHqpuKwpRTx5aavO0WvG76O9+QGLAxv7mLXV7YqZ147TeLlhQtYb5PHis1M9wFZCntWOmUbqlzLmhN32ifujeC4M7PG5f4D6EWhxkuXShUZ2ufC+dAbMt+LJmnGL4eNY12713/3IRqPJBQGY=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.