Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxab76e43e-b076-087d-aa34-9b8f165c3df2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxab76e43e-b076-087d-aa34-9b8f165c3df2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0nUqX+JTqYKB5HQ6uUOHPFMbVjA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>0qdVHG5jxeeJJSVfqvGY057KpPfn8PztdbbUK7ZYQtkKxhMdG+Nemsqb8ms8ze0xy4zyPDEVBCiKQ9L06GSXnAU0nabJDz7PUrh3+Ahc09A48LLtKGSReh0IRqxksWFnag9l917SLn6keXQBXThFNC+7b87WRblz1nirfWoOXtM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc962cb05-c68a-3abf-4693-962fd626f20d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc962cb05-c68a-3abf-4693-962fd626f20d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>uxyKnn9kp18PJIWQmQSf9zeszPg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>RzCN3vtnRpHfetCaHq4iO3FU/NOrasC+SIzhdVqgL651UD2hgC17tZYCmBrbjA7Kq/v7kIxE1oyFsKOG0fVIyqIvxS8AmqvUdIEedmO3i6sRTUN73rd0943XOpZt/W7OLr7cYJM472Se4vR8ruUnDYviVqCYMWvwHxpdm61f91I=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxccc2fc1b-c069-99ba-b5b0-35f0b4d36120" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxccc2fc1b-c069-99ba-b5b0-35f0b4d36120"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>LQD3snKkuziitKzRC7WQtc5rfJQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>uSN6MZoFVny/VfQvuyTaMqOGBUJO9QUZ7f3x64P/nJYOP+XgBaP9iovN+UZayBW41J191sX2VmKSqoU0OqLxA/+yLOPpWjhK0Mele253IhupKjkXZFVG4FqQpPA/khIW8dnDZL7gDlJErff4hJeW/I+/OsNhkdKGeKz0Sgpu/Y4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx63aed0d2-1441-d4b8-05c6-cda63fdd7a1a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx63aed0d2-1441-d4b8-05c6-cda63fdd7a1a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>mDmIRrp2JyyRO6c3TzGJfXbNQu0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>VD4D++fbrnVrTJ1Si7rYPDVzPQEtm+YMo8HQUsn90Wy7b+U9uwnHiWaiaRj/wsA2ZOqXkPu3DzU5Kz5Ri2sTTAA4xXHtWsviSyBBY0mVscqJsIDB8x71TbhqL7FUsVLA0D4uRQxWIzhNm4yV/E8mjTxO4aRvc/Q6ud5vdbNeqjc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>tn1OpHY7+AmUQeIpxXn/HpHJSFZ325zm4AKhLcd2O9qvWbXVxCllwjV5qY9FRszdCb7p8OXlxdRpK9vXEf2bZJ6K3x0c0kHHeniDUvbUJzQ3uEpzTHG2vDD0VGMLZRFS2X2McbWxGOPI/qSZbuMraZIWu9+632f0cfXLThIAmf8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dYC/1W+RuPLsgJorHIkld5s+l2QiItUzz7D+TBLMnkLnVFwzKbunE7Vk7J8wrtXtv03kO1LIbeUxBhSyv9EGpWtxHpROdSbfesKqc3hNa/rI9eJlN8zuMXVUUQJtQgH/QOAF0FPfBYjUA43R7o48Tty1QnXq8NFE3q9txzz2yL8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2071d22a-62d2-abce-bcfa-7047bb0fb2a3" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2071d22a-62d2-abce-bcfa-7047bb0fb2a3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>4z+VJc9SbsHNJpIZK3Q/3l0kknY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ck1LDfvpPzLn4w74kLXIKymZBn4HHWO4N9Yh2D+sgOcG04QuDlAqZ8JxNEyca4rDM3uD2ZyPHETaDUjtFnASd7t3heFqMgdwWcB5lUo3H9fjzFtGv/2xggpY3P246U3U91vbLN9UZdlTMv9TAogBCakFFBP2MWWi+NqHi7iqYvU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>tn1OpHY7+AmUQeIpxXn/HpHJSFZ325zm4AKhLcd2O9qvWbXVxCllwjV5qY9FRszdCb7p8OXlxdRpK9vXEf2bZJ6K3x0c0kHHeniDUvbUJzQ3uEpzTHG2vDD0VGMLZRFS2X2McbWxGOPI/qSZbuMraZIWu9+632f0cfXLThIAmf8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2e8a6ba1-33d1-c70a-e16d-a6f76fe35c85" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2e8a6ba1-33d1-c70a-e16d-a6f76fe35c85"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>pn5gARa97GGe1+wHXA7tSgxmj4g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ITG6yQKusqjQogiyC0F8jEFM3H4FcsGqV5tpUMIuL+psjlN2gDZJ3bjvnGN3g814eUb78iaXRmrsewf8rwET56iSUGEVwhSDZWfeJko/W7SJoCJ/mTchDFedvOJbS/fZZq7HMmW0lrqGIsRGbXeW2tVSpjXv6tz6VCn6EyaSvTY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dYC/1W+RuPLsgJorHIkld5s+l2QiItUzz7D+TBLMnkLnVFwzKbunE7Vk7J8wrtXtv03kO1LIbeUxBhSyv9EGpWtxHpROdSbfesKqc3hNa/rI9eJlN8zuMXVUUQJtQgH/QOAF0FPfBYjUA43R7o48Tty1QnXq8NFE3q9txzz2yL8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.