Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx55e0383a-1ee2-e1e6-b278-6c52dfacd042" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx55e0383a-1ee2-e1e6-b278-6c52dfacd042"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>g9WIm6EscdQx3SyVN70ZtngRcTw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SvaTa7/jK9lKoy3pS0wVMqMigx41mXxVCr1DqUHC+T7PWVq5DEQx5cOQu4HJyToEBRk8JZc5w7TvQm9TUlziGumjfd4BycPO4kbxvrD4+1YYbPlXVeWC7lpYX4LmHzTMET7ixhwvIDB1vrw+L7z4ZVPf696mWg3S1bYh8pSVk+M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd70519f5-45aa-72dc-a327-cb897a528418" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd70519f5-45aa-72dc-a327-cb897a528418"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>kQ9WyXbbuJm95xCbs+AkP8Z95GY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>knsflTWI1R7NtpdOWIshIiG+Ghzbch/XIdp9W3BJE2s71bqE1GS2lzy+KgSjn35I7vP+HvtyZdscItJknke5Alxf8OyWUdb5eBVqbB3FK2//zyTPOegNlz91UzxTK8xbAsMkyAmHDbb2SWTzB8FCIlMyBPjEBYluqV2Xcm2JL18=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx22541be0-4b2e-02a2-eb19-17ed24759bb8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx22541be0-4b2e-02a2-eb19-17ed24759bb8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>/PzzgXBMvB5oDgwrY/fCpmjALbg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kU8ERji/rakVfutQEStAUT9pi5sKQ5oj7IbrI2NNL2nxzX/AWWdNSbSrVykFkxgwJ7Ba30xQWvoHsHgafCEH3gxS9bit6CxGvQ8AN3idqkfhMPGbZV+SV3gmML4cRca9qSyeHMutF6FRAZ0ktv3p6U1kWZgiWPsb3fpD/Sa+6UY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx22b935d7-7c0e-a87a-5f01-4b1dbb1b82a8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx22b935d7-7c0e-a87a-5f01-4b1dbb1b82a8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>AyHsM7R8VErydEwcy/qQYasfM8g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>k5NIjrShQrdziShldMGdBkoVdWYpmLkYKyBrY1/Kz7MtcsoTXjZbQH8t27tH97sFwz11khJoUgxtnfUt296QpgR9RFbsztpFMoNMO+cASEzKeASMj7owRKm71bl+7RCMmQdWQUDb+d3NZZEKgfFlB/bOhs3SXnZswa02n7HGyvw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>GrPVCFcAdwB3LTWHEJSZDk2sz9+Azp56uWKOF+fYtEVAWNmgz53DgYmR6om2VUjrpUVzA0hcXwKV8DCTyU2WaBeLGbUJkxB5iCW0+hCoI/0rGU6feYrt7szzlQ2hS+yVSPHW/DvoyftJGRzofubomYz0aczW4+c+DYPBrzZSLGw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>pYOker7CxtZO6fSTgNlp8gtuiKKPq8EBq1E3nJuz9305KVI51kzZ/6seVKSaxaDFIQlAfnWiNhwIlSDy6x62RGEKl81v3RUcJlfEc9TjZpDkCPvHhcEHdj+LTuTdHk2hfWVMCWG1eM0f709oo75UZwA2SHGYxvDh+JDKglVL+XHJTaFT8+g2eQh/UC9mOxFQCRKOpQgZK1kPUOD5LZmpuNK4qVD7lc177R5/nRFrHWf+59xdFLLYDdyo6Nse8Cs26WR++txtth21gJSvI5i4BhyQbtgmPHF6cG05yc/nYUlQ1VtawhgxqY+3CuuDN3/A+oFNb+PGkIXHp9+UPZVc8AAb7vrJ1kOrRqnqN4UW32Nm8CKW5jmgVKkzKyNvz1oLQulaZyfkGmi8D8kU2BiI/3urgjjryr4y8MbmUxcgA+Ux90RbGveXv9enHEHZrQrOtWYczRBuZBtKAO1+Km9/fnSE1nHoxP3IEcWxD1wZ++LU9NG0dim9yMSvGwNNMqW4J4KPouy12ET4j8jeIOrDo5ZUsUIUB2LmcbSL0Ba9mlsIFlf+W3ehFjDh0QauG9UPZunsliJTa31weFgn04Md2MyvzQtdSC2e/b8qnH8mNeVViNe0jhqlYQN1WUmOOZjCuHb1I6oigUFuXIk9wUjad36KHY5uArNout+Mg9YwQUwi7dpznNOtHKeR3Hzaqa0oRSADkBF629uAgpierizuTg1S3a5beyH19Kt+F0Q+2YS2rDAMkQgI6cbV/y/5kGqwG1K1lJGen2UtIXNiD4ZDGQ+zdEPpsCLmXL9DseIHst4eRfpufnLXpGcWPWJxaZvWwgXfEJLkv6+aDYx2Dl+VW459eWxgvkUJ6FjjeYpJUAYWY4JWbhTJaCNeKB0xtPR8OKlv5jHlUkMZcvCpn+y5kXjfW3s2S/2ct/8yHMrX9QwA/gZigP+R0P/nLOgXcJTJDhqy7vhyH5IRGOGYSsdcn2EI438u4UyA1f1NuK+jn4gFZPyLOgzgXWmBEBY0UxoGIMnZB2ZXsgK/vm0nL9TWmXcPhF0gN0tj2ru5N8xwwxebGE4c26CCIwtv60q7aWMpleDp3VqZSdDEJDwgVbPy5th7KVj72xrB0X6h7pyfwZSkGZe9mL0r8QAxMrIKLiNEIbxB9g+0lmxkz/xdXw9OC6OAon2W1D0cEEuR5goCVCjWVwPD1pGtbt9nBXUGKA+ZZVhaKkCQetZlPH18A5qPFV9Iouh+OPzFQMq1khIfF9b8+TJqsMGLekOGk4gTvmvnW7UZKNB73ztXqjhwP9B19MzMZ5F6p/KQQQzKF1WF0fEEw8LFrK63rreAiMlkCmQ2X5gu3tOSXG5laqjpBHnzvTPA4N6AvJiJ+qDfaPtF/Mx9vbipotFfWe1ybZChjrkx2wV+ehYSfMl6pkymnSRar1qWxZ9kfgfg0BxnevVSot+VA3powDaa8A9bJJ7N+Qw890hayXIDCGKVu0kmVsvAd1/ALnEmeF+PUXxwRu+202R9nEc4cjQkuKbbVcbbDKbtKNnzlTuWfNDhsQfc0FnObt2BIS2C5rJP+CAV2QdoXlHIAOwAxwcOehnEgSS9c9txXn3qPwsYcXo1jHtf4Sdc4Jz/m6caKDLN3CopJUQ5v1UPLPt7TJsOS9BCdYwEZMBvYgeHYXV4WKRz6n/JefjZeLw8aM3U57b0VNcsdvrjh2i7IowsLx+qnQ6d3E+kGsWrsX5FxdJ5aLIUgUi238GqOnBCBT09cVNWsEIX431TEbuHcHZ2VNR89YcNVOCw9UDtkbr3hqYVpQXJ04pAVE2kYxDupTxdJRerwLHFnOdxr4maOFpZgcUKYvWZk4bjDzhMEUrQKfpy5lIAWnuC+qw2z5IEb1S5w0EfM1b4mEXIn6QQJZ+wQWK6fexXzmbP1cJyIpJgiP1DbBlQZJ9pVeta3DQjwYYaITlsNckSObdEx2+HvDcPfkp9VC2frW3Qfx+banA3ypXV2J5dl0AgGacQoHpbuJWnqTiRu/OWw/78UfUOTuzM69gjs9bnuELCpBJXObFU5WaOmR9Zs45FYmSPXnG/N6UOYp79hgcJeXT3Bn37MW199S1HV7cE8w/jCK8gUMi/cr5AfTg6nfD8VdPFj1+6l6Nc1/Srq9qCGEXzR6soWiDihwgqFc6y202ou9kszOMc3S0idB8s/NkdZdf0D9S2k0z+/hbMyXlbsmbaVudcYuA7390GLSLrUV/GxZTKy73bB2tycGW5VfaCK4IhEuldgv6n7fs0VwViK8V1DJzfotEFMC5+iDesANDyaDhON35dai8uLRA2rjCnBLMQR6UN7W7gOZK4/yAUQkrOBQryrjKvHV3ko6qk8jDX0HeMQBGGqJQTGb5KgdkHBUwc/KjuYvA5eWoStdJYxFVDgf5tY28vdNu5wz1lePMq8rxFdMh3PFvOYFtDodr6+2Vk6IQf2UbEpLrNzAycKdUdMw0Sa6ckWMpHktRkP8SiW4DdLRacquZlp5Be5Udag3DoRsLBZtTvO0UgMvIbMVWGS2aScgt8Lj0ZiVk/RHxov3fUINkD1yIcNl68/mcvVFopLzjB1JukSpHP74ZRchcPUh+ck7hRZShhdTwamZUszylQRYxjhwxYJxEL8X1tV5cqEH+9uxiZXT1uMzMtF2NFye7KEBziq0u8+kSRen4n9a14JhpQxBbdPKA/GSPmookCybH6FMlDIEN0Kd9tw1FoLYWKdo8V0OjFGyEvHX32kyRlD5502dlnEj5X7CQS8h0ROuSCtdhuBhdQxgT4QbegKw3RWwhdV3UN8ztD3Ral89NOKYyuPG8H7hJcH/G/JxLBUbgXOOzIAxg2gfIQEoMKqF0O+z9/dvLgr3EUNeULee0fyMnzkYfNgaJHAFFS590dV5IuyPhH2sISLRAXo/ZwENs=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FX6MnajEJTT8aQoR8xfwdzeQJKvHbtSHgsfLsFv1LLL1CPCBycQCNH4Wm20sGL5Vqya/XSUbjCRNEgMNj4amGI3IPZub0AaZom8QTbqEk/WlzHhHk6ziFhwHkZpIcSywqCwZESPALqCGz3dDnnUd7KlL0FkBoAfhTAvxHHH9XAg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxab4c9609-7e0d-1fdf-6574-d4a99a2466d5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxab4c9609-7e0d-1fdf-6574-d4a99a2466d5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>sZPwBGpirX6AdeB5VW4vbRA57Q8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>m/re2R/MN9FOaMYY0ma56muGPBgcTp9ImqZr6L/oA2sn0HhiE5vM5zQnH15QpHKvtFTU+ffl44oRgK8tL2MqEd38A69Dc5WNm2RJTKnOYEnrPlpdz+MfvXiswwq8xpnApUizxRUkt7uhaps5yWSq+/KE4Jl/DbgQYAwal5iO9Vw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>GrPVCFcAdwB3LTWHEJSZDk2sz9+Azp56uWKOF+fYtEVAWNmgz53DgYmR6om2VUjrpUVzA0hcXwKV8DCTyU2WaBeLGbUJkxB5iCW0+hCoI/0rGU6feYrt7szzlQ2hS+yVSPHW/DvoyftJGRzofubomYz0aczW4+c+DYPBrzZSLGw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx0b3b8f53-93a7-ea92-8804-c44350e621ed" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0b3b8f53-93a7-ea92-8804-c44350e621ed"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>KEABbrZHniFBtGPTaDccSPKQdUY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>pSbvWeSHuXl70CtrjkpxNfep6t9XdUCzS+kD7sTyHSgUGmFwG8QSEjtUsGRPxCOI7y5fMpnhj637MfoQx3j7smNogoIHc0Hu8WS1ZAACKDsxTOEqUmiX1S+uaPit+b88gLuYnceAby9bDuIpjv0LHS5hUCx1vTYjNTkrw9GkOrA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FX6MnajEJTT8aQoR8xfwdzeQJKvHbtSHgsfLsFv1LLL1CPCBycQCNH4Wm20sGL5Vqya/XSUbjCRNEgMNj4amGI3IPZub0AaZom8QTbqEk/WlzHhHk6ziFhwHkZpIcSywqCwZESPALqCGz3dDnnUd7KlL0FkBoAfhTAvxHHH9XAg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.