Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxf7492df3-98e1-84bd-c623-0928e12a449d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf7492df3-98e1-84bd-c623-0928e12a449d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>QhHl8c8wXbgbznC+WLsAkKwJgEA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>lWFsjAKn4PmSJE4LlHuThrGV3rnAsFt6uumHLK/CDzHBJJoLkf49dA65Ofc2oD9VCJ/cBAksWM+/ttGtgMp7RyPLZxe6340x6XZQ7a6kCwdNjmKA0X+kHsKWjmbwsnsgZ4JWoxyC5vwPp6hqS2mhZ7iYtabgcajT8lRlXdr1s/0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx06247c08-92f1-b819-4f68-b4805235b73c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx06247c08-92f1-b819-4f68-b4805235b73c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>IzCuF0ySPwNWnigPC8c0fJoOQVE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>etKDuAUQEaGImmN9kqDUoqPsuQiDE+KXJ7pkE3Vd7g9kFK7PBE8BD5ZolinvM8zRcuGPLFUkWoI9K3R+1k+NG6cuaAd0ZNFZaKPjk3CfJFitCxRUXvjwZvDHTaRd7def290uG0csexaGLJHp+a+NhHDlDeK7IifSU1CKA9x4nZQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1a3301a6-7da1-50fb-e47b-a888b84b3a7d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1a3301a6-7da1-50fb-e47b-a888b84b3a7d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0uwrgUIcD/mXWS8nwZIVwKqHebg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>FfFxFCgXehertKKvMc9ajjfPHNwJS7ZNofApAaGOuU5+pIj0r0ZEH1+gKNZg0ThffBSDXA/YstukKf5mMeNUdA31d9W460c4EUM+2tCnMWv8ZLq90+7jW2uip5htg0Il0u2NFdmBbWz/0TTeV1/T/jkhFGBO+f9k65RVsXsMBr8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx33afbdae-9627-12c5-ac29-6112512e5812" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx33afbdae-9627-12c5-ac29-6112512e5812"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>jSa98yHo4vXqGGo5jP3UmkWrSzU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>sEdzLlenAMdzy01eiKkZYmpur9E0/bKk4kY91TlH+ugtjDvgFANXz8Xy3XnuUxJwnNwhgzi0yWjZKQzPvLOmFoy9DPjldFUhuduYxIj6Hk/3IYqE8LIUPsQxT9DwmPur92x6iGoRwIBWyg1WAWr1HRTdXv9nJ7jjHd1ZNmTfyb0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gN1utXo6/zARU30Ugoo3xIjV9jskBembmuruDWVnDD7xyeXyNGFQljJT5m7hxSvFTUpgTK+hE/SuHyMpdzEF6dvoyv/gGJhED5vasj1jaGwCqhRcPf3rK20KQiGHFTX2ibCy9PJDzPxi4BD2Mg7vunf45wh71brt7QsZgwakQ9Q=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>zhzjYzmiQmD6CVSvOEWalZubGFoVkFUBCK3QHsT0QR7xhyeJSGlBi2QPtXgPdb73ikUwQttjIqMrlrghPgkkQvlz+8i9A8RIJcJaf4aOlrdRbpVEGZSR6XNd9iQAr2C1xHGcsQNL2dpPo9ReQN1MgQseKcNqcB0OpZQsBxZvlj5MHK6KOzTzZjc3giUuSYIG/4TtWZJQ4IPTYQSDEAuwOEhFoUtvrkBzUdrRF9fnXEiWZIv9EEByFQffgIIER09pWTOxu7koLfrIogloCcOSbSKtP0+eH35EYHPoBiHNCm+//LxbcvwyJaZvWkA7bE8lSUZ7z0GTBcH6mwCXrYsSibgaY3qCAt1DHpsIw7EwJJ7o5fIINI0jMvypgYaF0pecuCJPcwhNyWYONMfU4xxQAaKspWij3fIzycOMeUImiflt71FrN6tL0N7QMx+3cKW00IXa4vg0p3wy4PCBKAAQ+s9vE+n3SgjJzAxl7XWMv7C8vr3YV1df2mrlI9J4Rm0N5TnxB1G6lZq5OxCzbdJ2lVq2zWJ7/1O5aWwbN2z9Ox1QMvigKscZOBrQ24/GR11diTgVzLRGvyvbwkqvHwGC+Y2Xl4t85xAxvEnToQf70KsdUVjtuPI44IXMbPG4WPzCEkji9GAVbRPdl2CAo3XYxFfHsuyAliMD3YRa/Xu7URvST7RIrex2igCJfOwq4uyyoczWi/n+EP5RL+lopK44Reu5B27h5kA0TpqD/UCi7MaUABawdINrrdV/WI5NJwLAzi9uE6CqkQXl+I9ZIY6E5RSn7FulsWS/YsaVTHHUIy9PRdu4ApYn+ajYQQwEHEdQbugYFjMsOt+sEiM9NJydYN2Xt1Dtqg3tOvkPhEBU+w7XGV+SLk8yJi/SR/QSFXJL+9rvykq9crIIGHCFBv7Jem0z3ToxcnXZ6FBxpfQH+Ew5yj0Id6SIkWU2PE27iO1TwfPkJ9YY0oo5wbEryjQ3VgspMPEj3kC2HakD8fU/tViyPiTp/Ez7hvgrJuKCdEUFyl+Sqw05z2d4gLT4JbOYrWVNnsatO2Pxn33fNi70o192Fq5h7S/3ju8LkIm6bjJK+BKoRgLVW/B8bUvTqcnw3Kmrth1lVVswuFGo5IMdKXD/5iccFuWhv1AiRjJqILpROKLC7F2wVguzWR8IHJvoJZqHTyp4LZL+X9UMjLjqFDQ7SQgAsPgCLaWl9sjFQzBD8kxXi6cF1BIhK84r7YtLZJ7E0g35FYPe66WZ80D/oSKM0yEMBhw/XcZtTDYe35j3Y+xD477Viv5NLhGCIUNaFNfMOtIx3Fx46aQCiD4+dQIbaK7i1WfnfZeOInTQcGWXNyxxZGkR4NnRBuDEpfLd4DuUluXAsl8svyzrDbPxG9B1NCgFFQWHYreU6s3J1Q1qxRnO8/gytMVOf6WI0/C+FXujPxCifJKDL5i9QMrdFCq7ca+zNg1slR+MQ0h2xpWo7egLH1J+lk7KiO//1oPwJ2fFPkviG79V9X9yoCkge5Miohtb8R9KJWMw9J87Q8502q7y/uMLMzjndOka6MOVLatwdToYVRA4Bx6MQ0/u/48gt4PoqN9anazv8pHYGTi3+pFeQn/PvHGdTSLxsEODJC0M/9LXBLG/fb+IGpHUc5jBaxsXhjG2ICyPugJim49F3DVI8uxexjYEAddoJSC4oyBwkgW3N9r+G0t6CDbhraqi4UieT9dyKf0I8GeH4lkcVrG4bcc0W3N2iB1nj6Ob6c3I2m50/xZvIhMlvvoZfXZUw7ed2AINpV90c8Axmtd9SDS4oAG0tNygN9VmD6HBTj8gs7D3FuU3j/MT57qlApBU73hzdOsK0V8BDBent6cpUwXSuFIoqEdxMVLjT2V+UvEcLjPkB/fcEIX32ftXT6LU9Km9rAeiegiVz/XD7C1C7ftsReBcnidFIMNhWNVT48/3ExOBhLd75CzzQnCVUAAkBVfT2FagylWG5LXCe70zOY5vP0zSWoQJxO6bPPjUO4C5QLduTpNxjGgK65BlZ8lCcGrBdBFqI72o89WLzyTSVqf5gKY310MIPGajd0FQQ8tYSfY4zhicjGAnsgZVaLEmCHGe/O2MkEKKlJ5rbhKeXx7LHbO+PYNuVKDh36BO2/xoqIebqFuEOXL3oD2AGIHghbTnjrFxW4zEabMRx56NnU07RkqH+pFmvAjWWa2bH1aEiv11NnKE3O6Q9tBEJKQ0P/EZbnI5VUrkpG+7a7RDpotw8qdyAH2EqOXI445eqm8dPE2M/OqE9DDyNDS8qEbqzpV9YIYOXb/rnJeLqLZOlkVhMip45Q8r5/JerXjcCTxsPFlWkolVCKo4AXBpX46ujwNcf/AEgkLdhnLi+FP1pGes0veD4OLOOqQoxYR7sHIxbhrQhNUVy7nxRLnE/UoIMFa4tKyrXw6keURF/pRN/iaFZlDHSaGQgckcKrShta6g/oxAsLl54z599lbxX4OIZUnFJSX3YpYl0tjJJJ33jXUXtTK3Z7680ZPwi1UrGlvyy0uMFMOA0MCB4fTdZ/Rtv5cqdPghafFCPbJYdJ2qRH+limws6VeySlxA7QyrLySX4WWuodZIyqX4YbFbwpUDL+beOhfohGEVHgkFxFJ2hPLu8C3xqLSzmNFajLMQpKmMJv13SjdVSnyUKgT8Bb3PAgaO+r5uCA3nn8ag68X1IJ4mQ7GrPCAa35Q8auJ7LxG1x9oPCQtWUiwqDbFMdgu4nSHFXkWJiiur0U84xidWe1rxjP/EGRzHic1o0HIehF2LYc7Ek9f2V53KDUN0zc6tBFkl5sBAEC6HEpYyUJ0AUmwsk7hxK7O38SdKbzVbBCRARViLo2FjOv/ME96oAS5c8kb+FB2bpizxeOcv5xUlMyzihyDNK8pecTRGLFypKtXFR60bx6gne7eZH1j+VLM=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>V9KIDJQ/W3zmSIwp1zURRkrWOSZQEME0+HLIbqs5dg5TdQb3ZOSdXZJKz+gbczaEXkND3aRpfBjcolp5CNn+MCuZers1wWCHFTl8vk3B5Zf6mcbxRFp9Azj5taMOkL/4q7PwJVeojh2wYAjOp2Dak4a1daBOIPvCVOSIv7DWduU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd51d9421-3ee5-75fe-f5d6-2c5f88f04caa" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd51d9421-3ee5-75fe-f5d6-2c5f88f04caa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>8QMqcm1VA/Ujnnq6nuF0tIKUu5o=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>n9s3xaGVMan4yhWh+7q0E0KUnEZWyw/Mu1C8Zm7GO3Vc1hONdnJp6rda129EUwl57tndgQV/D1oknN3uF9PzAB2HDTqZ4gtAfcsXQGusKpAy5H174wndxI3mGgA703C1k6zIGfFUJa1ih/1ROd4diMRnt6RXRJYp89l85+cWM+M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gN1utXo6/zARU30Ugoo3xIjV9jskBembmuruDWVnDD7xyeXyNGFQljJT5m7hxSvFTUpgTK+hE/SuHyMpdzEF6dvoyv/gGJhED5vasj1jaGwCqhRcPf3rK20KQiGHFTX2ibCy9PJDzPxi4BD2Mg7vunf45wh71brt7QsZgwakQ9Q=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx37dd0e35-1b5b-1ada-c0c0-54295ee92714" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx37dd0e35-1b5b-1ada-c0c0-54295ee92714"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>PHryavQO8kZsZQ1vz9wTWgj7hqI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>LhxUD7u9ykaHWIS72KmXmlcSZ80P1VfU3l53JnmVaj5hXdIYIdk3tYkaKJgJMyAAmGPuN6Nlw0BLbv6StQSXsC/FHwrnFP6vGJSl3m0cyjLhIN2fHY3i761XIKH6BlYnk+W1ViAMgNHzqmlJzO5jUArUF0igeI3RoY1P8simvJs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>V9KIDJQ/W3zmSIwp1zURRkrWOSZQEME0+HLIbqs5dg5TdQb3ZOSdXZJKz+gbczaEXkND3aRpfBjcolp5CNn+MCuZers1wWCHFTl8vk3B5Zf6mcbxRFp9Azj5taMOkL/4q7PwJVeojh2wYAjOp2Dak4a1daBOIPvCVOSIv7DWduU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.