Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx3ab2a534-9dd0-5c2e-89ad-9c3c4c72ea0e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3ab2a534-9dd0-5c2e-89ad-9c3c4c72ea0e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>e/Y/aU1O6kLjnQck4jl0QOooDYE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>gw9uo2DNwu9D1+ey4cbYAcsdigYhW7UkfFZ3fyksKGrm9MI18cL41207XwElKCyN96sRE8BZresKWwiULQXSyctdBAeugP6vfkWS9J8S1M+vo2n26tiher7eFuK5qdtM+TQBAAB8ikuDAhXh0fuPAZyNzZfNf7w+ZRaeUTNFOGE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx436a2f0d-aac0-d991-8a3f-e747a42353a2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx436a2f0d-aac0-d991-8a3f-e747a42353a2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>YDMpniYwMNwMBVx3uhvk/0KD+eo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>DxPHi7biDnVmHFt97l+k/Y4n0ZbqmtilJ0tWHFm6ux004TLL3wl4xYK2ipMjrh5fYekcXQZhMgO4XmERFfv5gu9r2ZJx3mGTpZcmyhgqonv4wOYelmyzgPNPIyLckYB/GKQEi21IcRXxk20Qngh+TuoEc1TbtYwihmoiu9fNpfc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx97c0e9a7-f3d9-0d1d-226e-85c5c23dcb7c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx97c0e9a7-f3d9-0d1d-226e-85c5c23dcb7c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qd2Giky1pGNyKyoaO3rZxYqWh3A=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>sOF/LdcW4Lgxp/R6boIAJtmLhihYmRs/NZYpK9ZSWFI8guNmUF9rbOM0GKod4uyV3i5HUgcITF3DSSOAu1Vitv9b53a4WJW/m2GgmoC2vcNlprvRQBL+FNHUGoL457XFqW4Zj1gO3P+U58uJaNigbHLe6oCZe8c0tswmypVBobY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxc6a99d6d-ebe9-1c40-e498-6b86a7106efa" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc6a99d6d-ebe9-1c40-e498-6b86a7106efa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>kYgaYAe8Yd6G2a5SWYqGHf7rmlg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>bahp0rVUzgB3jAauapgKA5USchnkU6R0Hm0CPXo5mR52D+BA8a5uFZXMJblwO76rk6tarbjlduCraNqgeOmYDg5XWRZsvovE+jmG/C5HVwKyiqBXT2atu1x49PIYKZL+uDK8yMEcLhk8O2IkfmMvoICTGqlvbjQJe3nJHwOXOjI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>0D15/L0fH8Y6GATQfsWbi4ZCj4zV9KxuyrecE8TAiaLZieio8/MgljTkX1WqvM4KLA9zhkX1xya6FjIl1ovuMVCuf2Z8uNWcuFvkOxO7SVDxLxiNe0K/D8NkD0LrjnI6yVUVSdZ45O0o8jQISYMWk/C/9r4sQG6+YA+M14dJni8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>SUl5MzSnp9ofAIH3XV8NVpfGSgp3AUawJ6UoRr5TDBZ4yoTSNIEnu2DFky3dw7QRWOiUXxNjqNGBOjhcVF5uisixoXshOHMtygORrBdGQK823cASeY9ojZ9Qid9arlecp6mkVKNTSEUsUaJmAXP6sCiu2f/IY0ea/cFsDRz8r5o=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>ogQr79IhAPH4YRLmkB+hZRY1gcC8Vi92L+FpQ+KNdGfea98kFQGNKP05hkn6oBP5B2Dx1nyLLymZ8rstLqLwHxNGXCGt+EbUIvD2ov7gxtQkzIm+K59x2BfZWymcfdnLhbt96vLSDk7m3R2lvE8iFCaG5Way8fK0YasQ/E3EPBcL8x179VeqXil/huoDVSdbXqeKnfHZon5SbYexP0Nz/zCNSNLoRPssiplNcqfx9TnpJ3GKDLU76NbPW72K1A5YgEExkNG9egBXtB25rSzeeT7RfZr0kJ03IT/B0E4K86nt5GE/8x6Hj9kkJ/xkbtbFocHHzafdiWnn6onJBiDx3Zu8PG5sAxlR5DSlKiUG05bF1DJFXAqPXIZOTeYw6OJ4j3q2n3wIJyjeRxwmrCpdTBY5NrtlhNUr5RFxAMXOtnDyGEcUa2SgW9QpPubedHU9OEhIEJCZxwBCNVrGd5FrBRQoeFFhR9Uc7NIiWJ29xs14dtrJQdVqP3kYhJs63k01YI0lh241pD/EcVzkO2VmLaZlUlvmxGvQCVSl6RDu0dhslB59x57UFVadXR8rIEegQWI4ZN958gGKwssoHlP0fYLyETuTx5K7GF51IM9+90EVWEhWogSZNO/4CVbTByaZLpS/Mdg6O7sc9Td7aWd2TWGIYu1Zo2aB/DSr3Lw7B3CRMJK67i3HXGk6PirwDxw0AjYTZn90a1Ro2YatmcDXe+ZhRzfUjQAoEQx5flamjChb2Q6xHO8KQAabrhVZTB+jKqmMe/rqZhS7LRfGJmp7dA+CUWS0e9sMSEBTn1AHoANZ4cgsihR04Uk728Pwp8gPGxS64SWeHbf6AsuLDyknq3Sww9RxypchQGrz9HJQJtM1w1JECWcrQkel6k0NCR2v8wcWNUsYqEtY6VSze9Z91nPnM9u1oUGOi+CREtUv6ZOPdffHgJv5aBfDFykMA7Y5fURFbgi2E78+bQ7Ut5B0OZRA4iDmUE7yeVxBlGdmaFDTvCIzdT5cd1nSi33TDQKlyJsC1i3VwBENn86Qk9FQz3RaDdhzyeUqN8tgjP6UECtUL6ma4wksMI4JmLtsE4LNPMD8CFe7soCBSc8nUG/As+Gcrk8DoMXUp1VpNCNX0B9k8lU9vCwTid3WNNc75Yfi1TIexCXH/zIHcYGmEm482AVrJsdv5x74qyBa/wwqN/FCvZixj340dGwTMng1EC9p1pJId/v/lXxqlCsIKX66JOkhLcTBNbMo+RgRA2GdTd2I7M/uTRP3KbmbxDdxQCcWVd0cQZvFrXADARQcsSuh3JeHTj5WqW0PGZS4uJlz7kOLN0yPm9sHrMNNE/4Z/dS9po5gEKc6AO5cROD4SEAcrAov665uUv57juRsVjvh1cInCKOeoDPn1Xsz1gVnW2ENLv3u9EVLL8yy6lVx0qXyz7uhBKX/Z37sGaJYBPK/8a7MnviDgDQP3lQz2kxBzA5gT/omnxkaLE+NQmV8QO90dw780ANtisWkoeC96Wc/rGAM/ciwqblvObMCg8YHhox0iFl5CebHJnlf10DtcOHhktdrUHiVQ4XFwGU79q31/TGLjvKHTrV+KgUuozL4l5dsBXb2lAjTps8Qr1LO4stXXyO73If8hUfPwUgrJp+QPsu87pSFedlOMf/sR72E+LJJkhnXm10qENJoX58kkrzNhvwID5za+mzh3pp1gDeiZGcO5hAnmYA9NqeRaphlCkAapMlbr15mzHRVL+Jd4N8uEiJSk6YJccAGOz1n1oK7eS6f1qnOCRmWQa/Qqh6yzJPb7iREkjo3E05J6ROvKXgbY1eI4TgYcE8QGvzlYn+oH+ktXeFtZNOMXwPOIDAVduldsk64Wncbo9uZD3gM60A4/lPig903xMs6uGUVJlsDPt5Bhr2V+IxbZRpL1nLQ0T7f8S1baZDtZoPvkEFYlw2ev/aNMjH9wHpI09lxgV8qc2ZWHQCo6SY/XLP8jmniJGpTyqq3DELVI87Dv7DZcf7fNK/XwTxOhjRZ4tcZ2FO6Dk12luZ/FX1XzRGdMly0BxnKUHKLpjHzCCTeZMiGCuQPuef1rUupSSm+IWYYLyPX9hbVjVI5gYdLbGcSJCocwxSy2DhwiSWGNih48VQAhJxiyIyjXVW+FifVgnavaMsbg+OWn6u6SMdIdFMXvV0EbteS3axVepQrRZLIz6wwyExkB/jXZosHqfCXwYMDx/9R6kDquATwp1doCnm2neEYP/AQVOQsLzLaKjntA2dN0zOeSc/kXD15d+n3cAzMMKRLOn/jW6iiumGz92CNOyA5ZNwX8z1G0He1Q3Kamba7W+dmMse3M0aUqQdLiDX+Nt/KJDvYiLSUKSrSvASTjMFj9mnaPzPcvyHwZXgj1kgR0nM2gY9ohJaOafexV38krhV8UvpnbC5NauG6/W5J0eeFUsPBRnNA+1y/9mjht3YxCqoHfRb4SZ/HwN9lfYkhD2WNza2PZt8JRQOSG7FZP7qzX3U4A9xa/ohZr2bdfFPY/c0fNZVWHwCWdq7f8eYoQnr0GHZS1Bw+ySzqjs9tAzUqq2stifUlSbnmMIOKFji4z7WCxS+4quqFQHE+00p9zctjWXO4uwVlmyLSxw1/mBRqp9pawkkI/EoAmm2w1OrJbRNivu2f+oDOmUBkjhHcrtwh1juyFINVobsMLJAswVL6QL2VX+UNeMWsjrSGa1u3GHG+Zcrwokr/iUD2QMq+KhSNtgvZoOgGwfXn60cT029UNeoGjZlbPpeP/oU2pIcp9ZoKo5BJGVyGk7gITEaiD18K9iGw6VkhpmsZ4BnSSM3k8ykhEZip6/WL6RW2GZk37DD8qC3lO5F0644MbC03qdXBrGENi7G5i70sKto8+Zg7BcXviw25eA1dPejE+9bkUPHIKQnvO0LbR07noxGjMfsFUg+DL441sPC7SiRVy7PcMPKsjSyxGhw4Aa+QhiJI7R9IkGbiGIGzL/hhdgtDY+YkLmTv29yTkAXchaxWC+0isIP6d7iH4xj0bUvmj5sybaXkGXiXiMINhdN8zVu0q4HQFfL2ossZ19lzNJddV8p/zfdatzJpZGXRuEnjivS2DAj+7+a0/MAV1QYkNeXOfImwy93yEZcKXIcQtayoEvD9tn6gkqcljcjoIz2/jTIvBdSKkMrAtHblkYy0VKQuEZRqUY2Ykwu1VYZe+S+VbwUaIM/dSBlOXVJl/2WqiPb58R4iIH/Xq4PeKnSR3rPFRLDs0ElGolfkvQd/7MdQ796vvDuOg11cMzncinHFV1voY5WnT/Q7f6ni0H4cJdLMPcqJTS9EVePcM0kgnFYWfS3GVSkmDX6npNiQ4VEu+/XhoLxKbbAL/BkTaveWUfPV3L+w2wqnNBonFIxSStqGjPzxuO1kz3TTcOcLlicU0JzcMKCjXKZEgGqvz3OLc00madpMT93R2Vf1qJQpAhJJ1J1DkxmeOakOs3vvdtzvBVa7dEEb58kqPdl3AMcPD46GX5uM5QfZDf0D9Sc+6rNda3/0RmDdfq9O0BmQPrqq0Q/HgiKumdshkt1+Bif+VT8hP3OohW6i7ANCKOjdljaDUG6VZtVuUcZBdNFPavH2bTWCHC257oZzI/a6W8x2TI6aUdDNgq1p8585lCukN2SjbYZbEstc6zuUqQ80oFkbTjQVMD+c2mSeO5dxDRfji8UhlKBmpf8RxJKhX/ZHcRUQdmSvrpL/5VlZgf6lmzO3fDEEe4zJzP25gR3rvo46gnI9ydgCmpDbV0WySAboKDX3uGKlFpnpRIA3LrwcYHsHoJS/rCgjZZj0HjzKog1Ez6gm/I5aCAFdWGuqIYygdgr3A23wMotv/IrmSKVg1ann2KXJkb5JPaa1s7tUnTvHCVL4bKFOMis983hApRXRKOUig39KYQoxoL+1hot5eVNMrJ4TkBk223rcr61Ncxx+sda+WPcfdLZMoVsNZsjI697SaPHPVn8HUEsYWVTUHvhxjAC1RpA2LVlDfHIFHc6VbWohM2cm3dpYgUbhwJl2duVy8sEhMAHbzmCQULY8ktGVf5EuYuev3xip+7oHEI/GWrJ/3Zr1ilGdQQltIFDhJKaSvRgxt2iJusN46M+sLdM7MN8a7OZQqpxnOwgS86X3/5jkxVngEf1zctfqVJerxIDcV4RS3DBXaW6zkaQqaB9onZXUuPpGoWo8bbArszw+mitE5rf+sTO0fN3kZDunMJZckTi8/rcVBmku82KJObiCrG2LdO3+IAyQ59kHw1jenn9cqAf8+f8+nK/EkwOYHrH8x5ykrXp8RrvgV+ApFYveaPWbaCgMcljf5GcBxzNK9IBAE1w+5opaYGAzzob5NXnqWuhrJ1P/JP1I/uwsRNoW0gVLeSeII9H48J0cwUCZcijbqJZzAM//W6Gpczbe8Y3fn6n2WgfstLUEMQm42QnnmvoMTvM0RUGgyv8itaEanTEgVrG5ojhSEatdeK5Wnffgn5LhhLe/rpJL0MGF80O9kJxU5en48DsGej/ayeNja/PmuYdMdr21G9GVlf8ZQwcNnizwkt3gI4HBqSZz3nLFBqaCeWByV/iZXP0uLBsh/Iv7eSnjrE8BiMe7dNH5ZE+IB4A5hbPL0DRmuqY6uD799yv/qdqh2Z6x6/1fjWlAIW0Hty9W4IzOmbfmuJ0bww1lkKwt3p19kWq7v+VzJ0HYgT5O3ncW9P8cU4Tp5TKxD1YUj5KHMospP0BFShZrQa6TcFjm7lT4yPNoNR+ZdvPEiaIMU8ZwUosr5e9jVPrKNJ18+0Q+xgJtegSf3Xp5QPI2xMpeSYIdk0UovXi9t5WTbhDClpHs+bNgseuLvktZeBZRx0LyK7BhpvQ6LVGIsegVaxV6Ky3I4L0KTCxCubJ7AMKlM+BaX/jx1RoqTigqbVeC4a5pH+9pdfHi8LQZdvAmDgLLpDgd8II5V3Od6bvmB/FniBo4Aab7Oa47MBnY6uBWLUzbEQlDGkLCu7/twGBcSKK+su+yhC+b07aJHySph+u4+dNRvo/k+h9o4DnqcJcWYUesZdPv+c2lohJ4jklIRTp70GyhNClZAhMWweud/5EHTfncaWMEszp/oFfUn6WzFPCf5SRiDFVFWrl5iziZw/7ILe2SGsvH+jYugpDTcQzEPOC4+Inzqx/mU9fFkQ+bF/fUnlDvg3DbB77liotAKCloxuD63GL+PhL4z41tRFgMrTTC+pH9pjiws2IflcJKO3X7NQgDBI9YlpqWyIUw13S3qqLH4R1kHisauckDi6Q+eR753d5rJNTxXDYVFzy4Vp9V4bfRbq9/SVbPoF++OHRu2hQtznN9MqFbXKeTiTosOVfw5lqKX9oKEjji7e4nUjSd0J5Y3ty0a3cNJRTZpGXkVMI3vF958NuQ95ZkqxH/0jU+OV//2sOx22teaXynt6tdah87jog6xUgimATi0DV2wHWaeo8kagqGge4YrruTXNlzvamCKZ8PH6Ma07DWULrOVPc=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxee8944ca-f017-0ebe-a02c-ba627881183f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxee8944ca-f017-0ebe-a02c-ba627881183f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>odarshH4iYrAN2wbWnF4B3ZC8rE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>TRWJVbTxA4at5qMJSWDNeZePqCN2cvhGmjEWgXnKLBBrMwfJxSZNVxb/pIe4vgGB05mkXdBqliLg3KAyjvqDxT/afVv/p6mh2Ss4z851J50E+sTeLVG9sf5GcgWLI3gTGuKaUnbm9f3jQtwSCm6N6rda7YAswtRNlCFdkc+1ePI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>0D15/L0fH8Y6GATQfsWbi4ZCj4zV9KxuyrecE8TAiaLZieio8/MgljTkX1WqvM4KLA9zhkX1xya6FjIl1ovuMVCuf2Z8uNWcuFvkOxO7SVDxLxiNe0K/D8NkD0LrjnI6yVUVSdZ45O0o8jQISYMWk/C/9r4sQG6+YA+M14dJni8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>3mFgjLO5lumOqgFRxC2JsSnj0t/vncYMzLEz1ErlYwIEMiUyB4W5rGyiz6gbSnwFzU/mZC/mnqxbzscSIe7NhOhMoggXdgf3uAfZYVuRaeFu30xP4A8IGqBXkWUA5x9PlBUZXnzl7GmkgTQz69rGt9HZKHY53tLCOmlODmK+6FFbsW/dCTZLoVNuRlJII+2aWEGaxb7rtFbnce4O/eA17EaGq0ES28AtGtUSWfaYq12Vrza+uwnI5YejBX1V+3chXg3FACYM0TZSouW/+4b3srzdRkZb1kTruhFtTnn3PPQlx5d3B6yaWUfCEvzSbwK+MK/mt5OcZXjFEPXef7/GEbHLNKVOtgonKDF+PDLfrgBX50F3v03U+eI68mnEeLuj1k7RddVcZnbytg17viJR2aDJH2QtyIYLSJpOdcJPjUTMK7kuoZfzRGOPY7SOInnVORAn6Jg60F5w4GhGy+K2eHuRnIwqhrgbk4GZP3IMDyABcr+j9D7Kv+p2R2rGPmysPKPSerrQYjT9AUQSwAgKt5ENDPakMWpEbGyucEZQNAS4NOcd+hi4XygA4jKm1u2HP2K946nwMOgihWRGK+U5LH8IbQJkGGoMXI9D0yAQZvIOrcucyq87yEu/t6nDbV947tR3wKMkdUPG9zsbuoos+lo5Gq71XECM7QsG6pfclA0qgFvAPnsB/xSmJ3XPG4tM5MQfeR26gvRcs1rGKfXwgnl+tsOS/4qb0tmuFsQTiGQ2VpgmT8o1/rFJiksYtUdhZd3lMNIYYw4b0fYP1nbhHoWW4KSlh9S7eQhzFcWL0lNlbFP9h+qS/g+Q/Uzmfph9bVZ1jF5fqE/8iSUekRZFvWIVNAg1/E3d0gzpUoMySD912mDUNRqcVa/7j2bwneWpMW+doDmFX0CCJYj3jfJp47idq1N+EptjDJzel8mo8El8BKWEPmG/Q+EQas5r/2nXvKRiJIoeWWKPCxRH+IxsKkNqa9iz7VzIeALM0m47bcU4rBqz5HcHo2gJ9P7WyC7ekOgY/jz3CD4P0jvafLZaHNxY8vGIegWNwN77aR1cfbQ2Npc8zcvwJbs+auPZfGvwkbeB1vZZddo4fPovC9UpVSDRYFluObPMNch8M2pkeQZYI+4zBl0gJ1r/Vh+tI05GPykiOAa53wIovET89DZRetQaJfJoGdR5Hhk5nP4E1PoNWjJrqX1k7pVNz8BzMmz/KWT0XpUJeN++eK0is37VJ3sQWGrTlOMXVVQW/66C5lFgAMbfjUo17qePStAj0qlCEYt7Ma6VbxRn/rIr31eVG+lilY5Q1rlMJjZpl1bgkIqbZSweINA8b+p/wS7nkS+Gbfl2fItkz31Zio2qCUw+G43jZ0ZXSmjoiVdWKoLqZnlcJT7onZKSO3f01NbJbls2eSKstm0V8jB+d9kizgkAyzwUiwdxSqpcRF5Z8QSwzEX81apJZbbd18hUgtcoE5MaAOLwhRaHxsYxpP+f01J/TUYTVZhHkef4JwXwpsmJXj5RUjPPv77k/nvD9/8pAL+4y4pwBJyboq84QEMBD50jXbE1rrze9EkE+iQ0zQeB/aanDaBkrrHtUWqxlsppuXENQVzE1nyXxCmj6Ggm2Gz4K1ZW8Bz9gus/xVfb/xZ9FIAJNexi7iHRATfTfsimTIGxNxefO46r3SVldojM9MVyvRzv7MMMAdXeJR68L1vTczifnVsMzXdZGMJApXrsf21+7RjgkpFMGeyViFOjDRpLL0iOU7YqIYnueGVMXD7wvRAmgoD0ujWJVbww4Wo1FKfUrC3lApm/T+7Esi4qL9e1jWitPQnMTURU7ZL68DVQ88DvmNoZtJcGK93akDYjoNtMGvX+bULuclFVwqeDatSAiPs1P4R1Ma/ushHD10cGFIFTkxA2Gv3xu6kwG4USwRmme7VXKAmHT6za9eV70NnAnI2+QT4ZtdsgnesPXOFfQRFqrdqjVD+f0nr7Ubwdy2hvYSmJh3l6SVgQs3+HOperb0cTrAQF5wFxO4WKg/3p4f/BEZeE17bbEs76yqqc51idhEVanVf0Q9X/CWHTF2qdi7JTm6sEVoXMKHn+BOnLOVfmyu0l4aw0NuJPv2uxc78mnQi/rf2LUIr2eXPdLZLDR6kCkDgqLIikrBrhIvnE9UHnJ7DcIBdZ3oUtRuxcLnzTAkAmWnRcDAEngJpZiVfpFH1qmp96LBHMwB6DfD9F5Qn9N1XWevWIX5LjGWA7QX1ftK3s53KDcO6J7ISGnPdzjAymYmkGsIAGVcsULQjHgLr0P79nEIqmfwNn+UA8do9sZSrkPoz9DJxi6hK4Vorp0w3IM2RY5FIIqfzD1Ik8bxZcAK+AhhLnan2Bh1BACS4HZU21RVoY4pXEA4yJi/ZWrTvp9GfARKyDqxSJv4BYjj47TOU3tBvTv5cVEf6kW3YfB7hBm/Yp3waZfOfBqDL/J+ofcVqupbzDWzo/qOYtMxKlBqH7dciMPNeqc65rqPQbu6TZL1s+oC19VSKkDceJCU/0vzWVWeOv6zW7ZxF2MRhq9a+/TifCL3JkonD0W9oCzIcpWQskOT/4CyDK9dyoIYO0ny1u5qPp4wBgONAgmcI47gHEceMtdGMf8RglhVsSGrPBrLFl5nKkZLBkjEcziq6Pz2fIY3pPqwBqTlpx2Llstjo1gbrmCUnoGtkRRDVndZ/oD9i5nZOz33ftw6DHC6KQr35PFgmxCPAJQems+VkVx07gZfC1Ujy/5pW0tlnxzOxC7WZqkVB2RxsWCrX1uUmT6DImZPbmRRqCWaAi1E/i4UZrFh1cbagryofySxKQ/k/MIPminRSA/E8qmun9AeThbQaijkfTeOjpUzeHTBs9sxfPIUJKeSyz03RgBfwgy+V23SxEFXwSCU+6ekH7RETEJwf+27INDID6i9B1V+s=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx59d2042c-cdbc-3446-cab0-d340af6bf239" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx59d2042c-cdbc-3446-cab0-d340af6bf239"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ozN5Kmes62l9jZbef5DaCF8newQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>mIyqv/CRJ6lkozDEi6BHol3M0LLNKBDRBvRY27jqS+OlU6YflxUSEJdAimzh42bEhk9WI5K43WC80RFSzEa2H5wYajKNLjJ4EQP1nomnD5QISGmImfFXAU/VfiLvaBYzHyuWX4msuwcfJ3vtK//od/Wa1p0geCYtXJn/dl0W8jk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>SUl5MzSnp9ofAIH3XV8NVpfGSgp3AUawJ6UoRr5TDBZ4yoTSNIEnu2DFky3dw7QRWOiUXxNjqNGBOjhcVF5uisixoXshOHMtygORrBdGQK823cASeY9ojZ9Qid9arlecp6mkVKNTSEUsUaJmAXP6sCiu2f/IY0ea/cFsDRz8r5o=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.