Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx419e8cce-3cbf-f18c-5e9a-4272bb43ccbe" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx419e8cce-3cbf-f18c-5e9a-4272bb43ccbe"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>g8TRDS4BTA15nOMpL+Lb/B5i0I0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>lCc1wmO2BCuH6ODB6/Cqg/Ct6cNH3nGIOCHAhlXbEuJCOZxBDc0gv/PuNeaaYg7vjIE1UmgOAu/Cyut8SKuMsgqYet+aoLQzpmnITXX+LvOS6fc5Rj4yffIM5tLSZpqViyLznzFtUC0HqRSLMRPSf5aCPAKImL+KE1UZK0Kt4GE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxa3046a6c-9ede-ed1e-c036-1424eebf7794" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa3046a6c-9ede-ed1e-c036-1424eebf7794"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>GoB+2zkJxMMyBtdLRqzpML5K2I4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>H08FzIA0/LPM8ZIzeSdGVcvt4w71MxuaYGstQ4XBemnjLWpmj98Kkdtw00fOLQCJ6bamLle/RD4lSvOSZPx7CIF+jD2PfZPXYjZcfSZYlO+g3/TgQ2VIEHplFw4ChxZQrkT52rqGrNu8OVG92EOKtcMGTz6vS8Kwjym2K1E7LIE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd48bd24f-f576-759a-bff8-1c7b8f07331e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd48bd24f-f576-759a-bff8-1c7b8f07331e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>itNaUThcHkd7jPwfQUEg7fWWW8w=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Jpu1f3akda3BlGj4N53us4WG8S9QX8fhp71ZQwu/hWmUb7qRjWK9IuzLTUWiFicvJDJ+Fb+ST1sfwG+ZAqCP0CPf1VBXZEbP/GkAA5atw9dij6B7J9nemiDhO2jl0lCWyv3rm2pExPUa8jCE/UwEzelEqCL0HDbZdnZ0rM4CfO4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx50b058d6-33b7-8536-944c-d6b6a13c33ac" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx50b058d6-33b7-8536-944c-d6b6a13c33ac"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>tHkzgiExNR03sCTQmZZPcq7/vTU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>geTkB4v2OpjK26DZ/Pp/PN8V31GO1e2Tyj5Ci5Ymnytu/l7OxZ9p4b+dIxoVULY3OAcLZjfclhFQV7RaeYZC2Ts19lxWzqJVHFcOKPnV99DqAOnX0QiMeE5utGif7It4lQqjNMC5wqdn3qfZyGUGX8pfbDxHwPqKlOuiLog3RBg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>XuVuXxQ6L0F6DS9918W4AsnD7Cd2mtmX2+7A2zJb0xlY6IEfIFffoobX621q5J6lOQv1XDOrmNjldI7ZiRkR87MWPE+qT1jMIu2XGbNLbKOGQoDI8Fljbw7aUNPzJXDNc9AKy5peoAp04VNab+vUd5cG8QACztWPW3426qHmm6s=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ADHRWNt0ixGR+KFQBCsppAcE9UfDx20pZ1tDRNLqfx69AbCC9AVO1kNVs1Fz8/eITlQ2jXzBt/kXcpiWDolJCkJbOzMkRT7dm0D5w00YmWaZv1tIDwzewIMonF1VYRf1VD9XGpOOw5mj1IgeEPAltJu78IWJ9m5zRYxv8Q8j9No=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx0c7b1dba-b808-d031-ac03-f58c73134425" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0c7b1dba-b808-d031-ac03-f58c73134425"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>5V8CfuulBjI3m24KldbK4EW8jnQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>p1wz10sO1Z7Wuh1A/V6LsWhRaHxKtvRjSe6BGMk943jw8ftBfZ5JoQt7OSnmyl/8qkXMvkks0mDatCt+PV4z9sMaqqZymq1uMPspUw4v9kIbBDy0/2N80fhFZ0JJ9dylzsiAI3sq58tzQVwOkGqTwJ3909u4i+JnO5Fa+hh1ZZ4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>XuVuXxQ6L0F6DS9918W4AsnD7Cd2mtmX2+7A2zJb0xlY6IEfIFffoobX621q5J6lOQv1XDOrmNjldI7ZiRkR87MWPE+qT1jMIu2XGbNLbKOGQoDI8Fljbw7aUNPzJXDNc9AKy5peoAp04VNab+vUd5cG8QACztWPW3426qHmm6s=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb50247d3-9722-afd8-1f50-c665c65d28d6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb50247d3-9722-afd8-1f50-c665c65d28d6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>QqkCD3ODr5tLEtDug48lauqSWTo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>yWf7Huj6A6QaMDvHa4qkat/Q7YBI7jCVi9gd1mST7WFLkoRnSKGlmdCcJt8MJRIvc/qNTTB/zzam83+8J3ABgYoJ6eYCq7jtZT5aS6/4oFuQ0nkg7ef5wZJZvdg1j9clTHtFdQ55UV3XbJUrYoQnYGVfVejzU1K6u0zbYRR6dWQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ADHRWNt0ixGR+KFQBCsppAcE9UfDx20pZ1tDRNLqfx69AbCC9AVO1kNVs1Fz8/eITlQ2jXzBt/kXcpiWDolJCkJbOzMkRT7dm0D5w00YmWaZv1tIDwzewIMonF1VYRf1VD9XGpOOw5mj1IgeEPAltJu78IWJ9m5zRYxv8Q8j9No=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.