Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx22e45307-1db0-d184-3d1e-38eae803ddf9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx22e45307-1db0-d184-3d1e-38eae803ddf9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>fAuyEQ6EYG5TfLvMiOY3OHZl7/8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Lj5mYQd/cNHRL4WQCbcE2KkMP504rgvX+aZiXoAqJmIZ7BsWP5STftXlolFqzC5YwIT1yF9msDIcvtW7nr44X6jlI1mhafVVzss7gYC9WTTJgHqwWMxgVcrp7eDsgDrnq8i3cFxsKd7kCP2xJf++VlRWvP6U2JlS6L3UosB3uzU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb267baf5-7ad9-9cf2-5cb6-0a941fb75456" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb267baf5-7ad9-9cf2-5cb6-0a941fb75456"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>5O/vUNamed956uMLCM4kTU1BUi8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YyT05d1C+J+y43qWb8EekI9+jvddyr5QXUdyl5/8leA9irHjLAV2dWljNpwX2M5cw3cE2QWk8J66Z4Ieu3JmJn71LMzbJhfWqzXMmbqDk2sJZYU1YUg5CGBNrlvZYGszgw+EPlG6Q97Gyrt7JfacYk1Efct0ws5z3gpBBazoyIg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd1c86482-ad87-8b0d-2187-5009cadfae91" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd1c86482-ad87-8b0d-2187-5009cadfae91"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>jVDKfmDfvLgoDyeuT/fSEX+vAHg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>pH1HcAZBUvb2VhC2YJ1kw62RXSTi4exGvfd98EEZyXKGhuSyWgXR/FCS0vIF+NJRDAfVDdMohEz9vKdR1idHFU/K/CrqzL6GgODHa+63AB8SbX9eEKTPE3uwtGjmdhrGnTeui1IiAG2LqWezWD0WdkqwqUb2hzg8NkkK72HRsec=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxca5eaac7-ac23-7912-bef6-9c927731d810" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxca5eaac7-ac23-7912-bef6-9c927731d810"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>OAK7w0m+6NVrhRGVBMEGnKrjAOc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QeJfHWpW7jpDbJ9TuJaEBZAWMSMdoCV/Ue0MkDzJV0O9Xi2NGR7bZSv3xHplGshoL37OBLcVN8I3/naFtfyICK0LFqgc5qgGNud6eYmxocW02LOubdXE/rPeQfl1E4XzycqqGxyezvYWNSGfam42SyIoLLEp6uSp5Nqhyjnilxw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Ixh8qP9Q15qPJFMifuban6TYKlzAyhQrtiy3ac8l3WO47INL5rdK9UscVmKsYFY43R9UYoN6pdqqwqJy/fGWNTKGRRjglNecgOaW/UDlI/kKAYHgQ9iSoMJbR3HkQO/7LWbMqhjJhcZg1l7Tyu8gyu7OIS9qVu2TCwMbWRcuVE8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>xI46KozfiPtZdtn6FwQqEY6ErNymFcpHApAjfo0fi2gJ2tlqRrmGh8xzX/Yu3nP7eF1AnWuaIHm3toPoT4OSVPN8Ug0vkQf7DHE5T/Q+V0PI9t94H8zc6GeN9ojzcDV5GhDX3swkZiaYii0Gy2Kay6DFg4aYrn9yusQ2rWI0YgM=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx6f26f993-9cbe-a430-6174-cfbf769055b2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6f26f993-9cbe-a430-6174-cfbf769055b2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TbSTEMdnO62jnux/7XWrT20BwcQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>d/aWxK5XC776iiPLvgjRjqZQLA2nh9U4y20TnckB2w8s2nevEwU6D7CKviKiv3l4H+HTE7aZ8Lv8LLKHsDU1ZiJtzyfjnXFmaZbjqjkGy/UKDu9Da70F4ISYtEclDY5Gyca5lqQKIVYcNBZCtJDU77kgJ2kuahHF4/cEKtpvDBI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Ixh8qP9Q15qPJFMifuban6TYKlzAyhQrtiy3ac8l3WO47INL5rdK9UscVmKsYFY43R9UYoN6pdqqwqJy/fGWNTKGRRjglNecgOaW/UDlI/kKAYHgQ9iSoMJbR3HkQO/7LWbMqhjJhcZg1l7Tyu8gyu7OIS9qVu2TCwMbWRcuVE8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx01bc3b42-a141-1069-0476-93b66d0cffda" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx01bc3b42-a141-1069-0476-93b66d0cffda"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ObYtbr1ENFGUCFN3BMGGBzeUIrA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>dHTJbBj1p+wY8dUGyL5XEa07Ye3JE1KaE62bHeoxC7MWAjL/OAkAqeEiS3upRHM8YTxtBn+OcfS0JqCLjvB9Ixb8oKipVslO78U3EoUMyzuuhayPTradjsDhTJ4R4bqGuRkFTtt/cWqhvYPMQPXmJDQVToV4GEO6M98D3chkyts=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>xI46KozfiPtZdtn6FwQqEY6ErNymFcpHApAjfo0fi2gJ2tlqRrmGh8xzX/Yu3nP7eF1AnWuaIHm3toPoT4OSVPN8Ug0vkQf7DHE5T/Q+V0PI9t94H8zc6GeN9ojzcDV5GhDX3swkZiaYii0Gy2Kay6DFg4aYrn9yusQ2rWI0YgM=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>KWHRZYvliuk3bvo3MTaxHHh0QkPB3KkrLkfE4ij3Q+mrBEn3mY02VVf0466OJ7mU88zxqQSgbLZFyqd55shqPBu0TMPfEPuJ0G0KY0Pl2KaUizcuxTdIxaxh2y1oAfsREp5+2EDQZdpOtMm9IR1w+abp2cfiZJxXjgzkUqMddtBAXBVG+RT7ZSFLPBX/AF5HaiXCbHhMtDL5N7qH5Te1uhhBJatC/nwJ8QP1uuXuG+/m6JsEjcEbrg3+WavQTCO5/i/K1wetXFwjC+SWudUdejgbSuADdJbuBjM6oBIOAfIUUUdmrdFwWrCIdgg2sUR0RnEaSwRnm8kPASDLqI1JlZBoMwIRwQudEpI/Zq6x8wmQFV100drZP/NgMnDeAPqGokR736vpmDn9+Q7fLvkwK9UwYMzmEVQdLMERs4b9N39OgWTsQUAzt+xgOXsXkMBNctypHyNlKvOnM0XUhJr/61+9DgE2/2K88Navb9yl9c4fNylVGpufB/Q6ZckiaxBVzQnUr5w3rG27CU5MhZ2WvfuXtHAkfsp5aehZ7PMdBcFNlbmn0K9LeS/u/uDJ6rMVz4CjL8am4HEsKvFk5mW3BQgkFzR3a+sgMV/RnlHD1R+JULtD3emQv2dF5zMOt/NqOmDdpnSHvNPX4IHr2BGxlyOJpkvJoQmh9EAPBjw2Ci/jBLQPzpIPhYTMRFQuQbIUIojouklLYmwIjWi89SHYnesSvl04ZgZSBsUEWZ3VA+G45B5FmNoBDzseFPoXzyKM/cggn3qGijCPAOB6fqKq8WubzhXXfY7EvLp4/IilG3S0lxmb3QnW43Nkfmg+Fke0BMFwxg1Vd9hewW925Mp+qNMYR1zkRXSOrkKTpWhj3FWUfmFn2+gPeQEo4D3KQpNYRklKWCgZWAcP8NhthfrAUUOZs5FVkumgt3sMnQ8UBppN/L3VM0mxqY1NGMM5j+GQbW8OsoL2kMm5gWMhrLqZqvkRQ3vB18S/SZ1K9MsP8MrxmQdtmM012k+9bDiUGITA6VxP6jPy0vPtmB+CMDFgE5u4PG0tVoqjtK+xmCzsGtn8CnZ5jDhDFhL8SSV183mHIMVSd/sGJNIYlfKs5bmb1khONB5LEwDXTt2wKuM1ijkXEoDOPwhHOlRV8RPrzrfVlQ6qfoTpaYK0yx6kkDNmW8alz9DH56DGFLm0M1WZ7XcA4HoluaZUClOiWR4c5ndQMpE3X//x1myueO0cCgccr19ODp+ss/1JkBcNVHWcomvy4IQlSoLwYuxKfJYIHSstxg4X4lkaU5P7z8BCPfFMmj43MIl6lUnjCrruHT1cCB6SwRFkmAJeJa0Q681o+LmLnfgYCWXSIbv8uCybYrcRtGB9EjJHDtmWUes7XGzNXTMiwO7SNADwQujHofvV2Z2ZPg4tBsbwiSlwDrpICT0SheY8lmOJVhl5lV5ekWxXYbt/Tj1nmqJwEoaTiJU2qmqPLzAGlPjAiAajxzN3xYzOxDjgBJF3kHx2vuy6jC6P5I6uHU+XXC/3tfHDQ1/c7OMcZpPYN0lMFaTYQ5RvHbzLNDFDyL++FTztzzjme3Br+UhjR/92rVKIUoyb5xqX8lvDXEScpAGzSAmHnkZeUw5NAKuw8SQPv4Rqw8kQNnsAj+EK8+yL78Fa9dGioNOLzdm3imCgyLcHbsktpwcPe1/7fmV+qRr1C8xblHtnaMy2AE6G6/cRFMIf29Mc9HEWXbMLcPM1o3dxuyVw/aeHcW6tn0RUR6uJEm8wvMJ2hxGwYYsoblG46cSa6+RG6oCndkIrfeJiPAzAKzEWEKp4igzIqvqApRi+VNaR1x3FncudiLVfQN/NxyETQPG0Xbrnjn53/F8Y9exsZDjHZ9pPPM6Wdu8j1gUAec1gVvyA96MErjzauoPVxtFOg42PAFMDsBZaFHG74pnLD1JmxdZdIMMckcWUygNKG4FH6V5F0VwGE1LIb6tMJFpXAsUZIicGNiqk+1Ox4LLDPQm+iLlPEbUPqQXioh+iI68UwzAA7Zgi18Cnk41pVt3FMlfUci+1r1kxnQPt9CaE2DGYAlE5jhleSi3Cxy8lDYaCs6ah/bGRf4LUBXsTz22DWWuTTRoxFXnYbOIAya8SSVGJqQNxeUXRnR6V2p96V4aMUR957d+HagGSn9gceJsSgMwhEgiUR8bxF7OzEjZr4xfrHzStz9QtgARQ4FqjNytUlF6GQTYS6We6SmA2kbA6gvOJl1G7xuDIk/NBnwuRkl6E2PQBBqOs1Lxb/q7pNIOcfqWSteGiO+V5pqyx630g+9xE8qoYgTsR0OCD/arDZK3MPUm+9vohBKdLMBnvWT4yT9EHOXdUBzGH+GhWHEpKsJ7DyUZaFxjHnxqyDLYoN8Zpa2VmYEdrj6z+TQRqCVh6OioitSCmIyOUIkFz2L17g3dloyUaWzQLa24TGcVIN8fD0cAJCF9OOenpikYFzYE/wGSaqIl9KCAsKXbzokzkC93hgyDPSRlqJAE/wRGTIcANL1rgEQhY2tcCbpxdWzcxKCSH1YyJXXc1piqkq6K5o6RyrqsYKCFAYkI6+v7X3oUbcQK9ZIJYxz941z6Opq+16DTLo/fVVYQC1Nc2AlR/YYNRCiK7NoCkBzsY+OR3hUXhx3OWF/IqSGO0M4dKOVNoC49E/Mv17w1CN/m62dwo9jWs+JuVwEVUA81oTH5WpYiGvaN5YLZioVkhyfmncLiVbKZu7nRWAlajNOh/DONmMoCK4ZGAgz7KesMfQaz4rpsBH2qt1jew5OYgGptSkJJcZnqjrGtxQN/N+oTWEk4z48/tXCpEdSEKzyd7Mqw6CQXw2V5jLp4wynrri6gnfcxLIXbVCSEEq7vQUOCtEWApsz70MTv7p193sAhJHsZqIayBz0yc3A5sF36OEgW/IPQWEuQbVyztoyTJdmJa3abKPID39PGJsuqsH++TKaniKkSpfXckHxKzV8mjbmdM6vI1S7f7rjSXZKtB2YJNJ35uiLT4KijRkSwryiLUdNJHiwtYS+NU3eAx880KRh5HD4BfrfQgKE5/iSL3Jn51sT6bTMgALKnQwL/xPZfNeOr2EMsy4WXqtI5lijKMytwsolRh14p6NWKC48JB6glKz8BVzHqDrbPxgvVpITk+KwiLii+68zn3Sl+Ia15Jj+++XVGsCiFuAAx1yqwzd3Cl2GTH7G7bhu8kMv/BdaMR7gxTftKLEYNpGxXRWTdRN/gbcCjE0jfrHxwpZT3t+6qZTTeTSbNJU0L4DWw1f0IIyqV0ShTwbCpc/ti1jzKKEYzrc6TJgcdUvHLAohf6f63s2jKeq7bPuGhzzVJROBk7iaUlGG4zATdev8z9UCf1cwqNEuwKF62QrVzOdfwWEopH82aCboBvDP2q/5fU3kZ6qHcNhzsskR647urxIADjHLRBkcCzjxY2/RuVg2mbAkIU/NoWbSVejZba3ayDQi6xOyG2aGopG5WN1wn934ZF/3gr39mkNQLuMsqXkVdEy5+APZZ0sFGYs5wnJ3PDHwkgaQkZ2RptyHSzOS60HgKYHZleaisFFRVVdGUtKovXn0dy3zBXvNhhmSTeGiHGALRhvcB8j/hUdnKoku9xfTyJZ1xt63radTbVcMkAyjmowODeCcWCSciJJ+L7kZD4BM1Hm6jmriuQFTEYerre50HlKCBvlLtVbtFQGYNu4BUTOlusB4naE4gGfdpnQi4Ep+F5iBnWkPupPd8jB4GiUWTOgfiIqPCPR3IaIy5e+B6nTMRBJqJj6hsW0B+6XU+K0SX1oFF9Ai8rB2T6mDPXhZLLY6RhNIrAWLrhgbcD/nczCsudEMu8mRi5syYL6BhPu1h9BEw8KRAP8tQ006d6sk1Zh+aXSAaxR4NIpgJoJqFnLKnXT56g4wbsNBkOIYYDfUC9lLRBRKRh/32ipivWjI/2p/nJUzeeTM/cG1taW+iLg/2K7G3BMJuCZDIz/hiBYqpA+vxLh7ti01bAAP0RSuSeucwiEIEdFofFF0L+MBG7S9pDCeWFP+0DGejcxES/gsYDJVBc5LjEN4sHsfZYK7iT9tmaOESUMnMP1tjVObnJqW9EMxnMTxi56lwBKnrptLjchYTQR9qp5dYPO5yCUvLcGcCtneT1hTZoXqhy/7h6j+SalBb8q1+NVD4cFjhPIA1pB7r8emkoYm2jPnsVapnNshYqQ85zYKglZ4Zm81CY2lRD9+F0Jl92VZgqNFZMgpLeNP2DaPC9d2saD7QYFDNzNumqbKXM5pzGQ6H1nJDYlMO+RfgdmnHabqtx8BL3p+MqArBbSiCnkBQs0ypt4XSRmbqz3vXz5BiNrqnZC/sqgiuK0i5R5PJvQp+SfqjazvS1TUi+Ac2n4P5ojRx2SOm4ETLmVP+PHj+kKMvlrUiuCHImsgZeA+drTdx77Jr5NKmaINc3WRGOSxOGOTgAKgfJv6GtIK2Ac9P7HwZ5ZNG7/oQoX0B9U8IdXB4r4Ayv6sn326me5OCzMPYqowK+3xq0IWcRYuyTZa4tGVT49krB/18VzFKPS76qYzVoj+JlNzjKw/UfekOSXeVjmdkFtfiNHUb01OMsO6+ZRnvJ3Q8YjgiO6Z0pDs/9S/DR4JjcTT5GnVAtWrUkVufukmmAggJ+4raoRzPA8tHcxAN3GecHfoN1r5iHYqvbB4BCXLmvF4QRdv83E/vyspGeVKw+LeaO3la9SImfi2AqTxRJsBwgDOKMb+QqTmvzGiDGAViJie8ETN4g4TmZIw0H18bb1it96lTTzqfhNsQ9YQDpkgxxTDLP3zzRSmTdMkX+vcpV1NzsLyIKAuBZS8p6s8Q3p97qz9+oIDjHGh6etMJhByRv+zBLHz/8JBuDmgwdHqqcmARnQzUKPJmhTK3YqmzrEhx9RNF/hsKdoHGkIN2nfmplIlmulgBmLudsmgnHZMGFy93Mk2ZTTedf0DX/HOI0hTsJGzMHXZ6KRLjLqGQa7BQl982WjWAEUfIUtVNHXS2wt9WPMATYoTzTJPjIAE5wmSIUu5GNOU3LnifRf7UeblnUaWZ5N+TSEkqRNVJBKx+2NaG5HQkfLxwYzsvFn6Qvoxt9zr0dbk9P2YbPUax76YsIyGe8CTxz+MaMFzE5nE/r9glombyhev3RUY+w7L33/clfsxQQL5DxEFf+tgawr+6aR1GN0Y9EVnAi6XEhFNZdfu7jtg8GfIxAlo8o1+KGfQDLbwZ+5BQh271piDittX35DGQw2nUYA780SL+M4bvHSRIDTY3ke811eajgXrNElEYDawAV0RH9ZO1tu8yD1sdghWh3xxtGE+c02m99p4wbSL+aP2K5YiYmojYXHnzclrZ79qXXaXkEZjpH7lf66nbMdFYSotM3TwkJgASrnC7Z3eH03odn5ferY3ADdLfB+h7JJUQjDawAiWA7X3n+Rd0TPilMPjgPfYiWn60ljszy+6kPJZn4BLLveBnIT7kT5XjbY0PEWGEOM0owo9b/kio=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.