Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx651bc619-2afc-cf2c-7d84-b93221cfe981" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx651bc619-2afc-cf2c-7d84-b93221cfe981"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>j4tLtB2LnnMx8x/MGKMyOjflJz8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>UaiZavnyCEB4cVALc5w/J72qf2RTHTKsKq5gZTLEoLMKky8ejqJZrGrk4zzLuZn50Sv+a4FNqRfAGKb7PVYb2liKtj0aWECvvc8pMUuA5uRY0GcIC65BpIypwO1O9le+DIVMqbU71xWZAQBTlxcD09iNiqCI/9h055NrhDvQ8Bs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx732f6785-ef5a-132d-85bc-9a1728827261" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx732f6785-ef5a-132d-85bc-9a1728827261"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>4BGTKJv5VwQShBZENzAB4S3TOwg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>NRWmGRKlVi5sRwTKomMyWOWf1lSSdqUnHRvizuID0hLZgh+RFfaW3Mc1ARC3Jco3dIQ3iK5KW4z5crLVxTbGmpe7+PmDdnAIwRWCmR7kFN1Mz81kw+dMpNnPXr+9rxnY1SXlyF6j8hxFMyqqkdTN8L8eMue/fbb/0B3Lxhi5jtc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx8137544d-96f2-8943-9f1a-576acbc28c19" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8137544d-96f2-8943-9f1a-576acbc28c19"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+l2hPt+tBg6+20FC2WDc3fX8qQA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>uw/t0ESHJkIn9nKilabiZ7ULNSOw6y6hrnfKsjHDYQQ6y+zy53C/ZUv23ttxjYFMndr+V1SFNINg5Eqq/pEDyZB8KlfhtbFcy1Fmv4fONm+7z7jqLM2hEFFlK5NemC4nG33ky05AGjik/paSW9dxURAr5E6T7+N0DBV5Tf6CLmg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxcfc2464e-bfc8-8a00-44bd-5c087a1b66eb" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxcfc2464e-bfc8-8a00-44bd-5c087a1b66eb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>2ywaamG6MT3QFeOIDRifwyu80EY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>n51tkMYqR4Yr3uTJi8jhrvWy7EnS6lGcsfIZ1NVqBpl0sYBuC7Jy/+7m7ot0h2vZup56yzTjs5kn92g98OmBnlDqXOVuuAGyefWCqLR8bS0+6yyxzgGVmXCX1FBEUDPbMIVJ8dOQzMpfdZ6d8R01N1z1hFu43bIxuEvUJkI8Byk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>MeoXTPY2ym/BU2J0WHR+EjuMwJFo1eZ3zmEz0Ejc2UciBbus/yIluX/o8m460Zul62V1+0+3tcemTJexI48zm5T3LCkyY56sLby/ucNWXvPLyfxAPXMdWNvPyTVbhQg1MJKGQqtizT+VtcxvM0wqW/iI8A911ZijVfeGcvH+KR4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>VC/fZmpPmBTA+vE3s2/tqfOP6NJwDUcbKsUlk7eLYJF5mUH6afvBE9xw+jU09YXgIrXPeWFQLqNWc2hV9KoER9/KCwXbOPR8oo2qcKxRkVBzTS5DrGKS4NM7smOky2tgFPORIvT8vo+gkai2qhn/X4AVzap3crflvcfvUxe2SI0QVavjEkJcjQmgUhHhy4yDYz+Fn44c80+emh3UPdZcllE7QqX9i2crZdMhK6V3IuQUFzYI/W/Mr4B6gPJbhjemG5pPk2vaWeHIxsk6nfpWGv/vpmjRw5MdGqfVfEKsxCqjSIuhQtkVlJqNfUC0eCUzF+Bs01Rdlgm43h8ihUN0iZIv2qeLT/mHZkjaNewcApSIi/8lVbMK2Is94mGUIpwGTuSIiNZ92kC26CcTyt4+VCH8/rKQABWUCEkGKQgzBTwEuHsSFsXbYXIbgxetPCFRNp8lcybdeUZO780MliqrxmPbD39goQ9UUOHlpAuZt+Ck+MYKFfZfN7xNlaZfKMXqHLtqE8760wSZnA0r5AoUdr+UOzb9eYgR4Atn5ml7Nlt46pbMg4CXYVjqEGdvu4NDjph3CkQ4BnlAfogxP68WhH7+y3SqJDM9t6iyo6Ru1qWHRaA8ol0pmlTAl0Bf02Mt6l4IzZlhByOYWkzne5BI7gI3VkHN/vbTwFWfxWVKthb/uw+HCJl8UgRFjxOqfExEdjNSDNoe5kBYRk0EUox2URH8lpUl6A7rURfELNOF2ZvqFEBT9iDkd1m/yHWtPKh9kfuymy+e2Mmm6ktKlWUkZZGBYolv97H6cBeQ1uLKCaHdJe9QQz3r92oMUFS0H344TYalf5iyhqkFYg9UBW6bDtwiiAmu5GdtwHydWI7oI1guqdKIvGx4s09O4om7//OAzV63ke0onLgUBEsFGCPp1/XMJ30TlXGVUV/iOtp9qaj1pXBp+qy0/qo9vBvnRoI0C2fTC9SbDHZsAQKb44U8vo1d/TKL/VX/817aHWuUTKmad5O5jhA35SMkzk8waLutSwGnEJISL7X5Y/HGMDLsY7QNzRMjmp3TIBfu4uQQhLo8+aXdXU1+Et5uI10oI9NKBLBHPdatIgnFEndKgk9fzswUCvIheLuTrJTd/53p4yEknuEHJ87vU80Fh9mFBp+tvQwfGtqQeAvHyrsBL9JtXPNIPppP0qOUxeoAjd/nhl5IaT/lFVb8eV/BbEQvMc0OZu5xgoqWsaQ5BQZz9ZaJzdfxrBOloIqViveDGeese3W+8y7GBGlPk8hj0nC4XeQbk4FdJuYpmimknmG0BTXWzafOJ7loESwPEry06eB5YYIAeruELcr7pYkFCcTMHFRUG0WHcABqTtlMUTGJ/gV8RdiOa0Wv+faeVjJNxNnO9sNxerXNqa2+aY4wfiChRwOWJ+OMj3maZX2UP+DewJf37EkyrCx1vQf/ILsf12pWmcIZYQhbs5XHkp4MzK/+a7cULKY/0EIyXnMxBV9dwLanOWzOvUwv+9Fv0WCNBKtNuAGfuI03MNDv8DgTeBTQ6kJElmOwmlWqZmxHl1t1PGoYnwPQHSrwRWGb4zP1fbT7jfMNeUF9as4imbxmBGi7UStsewHEgaVyqjAcyQQmPlTO4PPSWzMygHb0sU0jvWAWwtcoZLM2vCFiutBlr2MIKWrTJzw4O4LyWwgtKxVfeKwGbcIsAS1VdKPJqF0jfp5LXl8g1yHyMTU7kDzhbxvW6CM8DYpJunyPj/bOhBEnoUoShziwKPfYtQkMs2mX7eN6gfCk5D13L0NIYYCwWlK1iIcmzD9Xi2JV6xRpcrwNKN/cYfLBF47vdhF5Sd7j/6hPS57V1Qvy/YvbiAcHrl4q2RiZBrr0dsZViGjknUt04+PTyAKsXPurdSNdCqJKSnqYeEg+KNO4hPVvs9iELbYGQZ3FDULZSik+sSiyQVu0ALwMWB1EMWJpDz+ALTS29QGjl41WJH8VD3coAq7GbNKbRhnmOu2HXCfIuWd0Ljg7QhKc2QE0SDgHlb+fAWZGR48dmGVkabGgj5nvXPQufCNJ42qZni+Fyp8M/Oi0JjpAvcwo3Ceabn+uzqtvmu3t5dDyryD0YiLDdqaXGxPn8sOoOETrgiXwzIl+PmY3uluijQnsu4y/GqzGPM9WHenGVnnACTFslzJnEh+DJZFqlLn0zieZTnuaPzOJJueZ1uCL8hqo28Va64+OTnxqcN/WOm6Ufpq4ZL66FJ7GLyBw6zHvHC11LzOnzOWqBr44+mWof3au42kA0BD2pv4oDc4ULRjAgUC4CCoFice+4UNAYosi965eIxAWBrIlkVecU7ge4hOnsJ0fnBTiQjcCY3ePyfM4cXBdMHaFYWzBt4Bv5YaT3nBo4ZDVS3+CbrpNDNfuVOZVBYqnUH1aHHLt605kSysi7+3elZKXHD1BD4ORUc8g0wC1bfPtv/0kfatOkBG1PHdgkXZ6jZBniqUQu+nVxW2BQvA0jgi6xlGnCL3s557vis6hXtnoqoADfycRhDXgw6vPXKUekakYkGxqLhT7CBMPr3hAzDB4bL7AlG3o1pwiId8eC620jWqYadZTpXmhw9L/5QS/QXVtB1PNtRHcUvQCphgKDdxGtTKzexWj4sWvx+7j+CPg2wFwZt5nw882Hlt18I6NfLGfenIDsC8f8REgod+inNCHT43En/3x0W1dv+Xva8OFOCFAHYVWL3cp5BFJkZq5uPDOW9Ge/xGrzE4sUzaMdpGL+wuL4x8/DhTd/jxatYdsAbJrOqRRodr5C7iZbAcCwGYBDk7tYoP90idyyndFmd04wnDQWlpi4e2ylRq9Y5qsJn/wVmuykIcnWJc/1LPyaQlBaLsQcRURVSGI8ruBRteM439H+YmfojMI/T9UvaM3b8XUJkjoak1CtZamqVPkE8nEutlv83FRgWOX9F4=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>OvPPLLoyHOIuMC73vOEBt+lbyuN3L4E2oB2U9uqgOnp9kiiYOuvAiCJuqc4L11U5pjA4K21xSn88KAKTH57tSdcOXsPCyk8ZSW2pO8wHg1IJ+vvu0NRv/GHcrZ8FiiP+94g303KJPXBqR3PAC9/Vw2TQwSRenF+THSg7Z5mfFJU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx98efa616-72de-c1c2-fc5c-f3805e5981ff" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx98efa616-72de-c1c2-fc5c-f3805e5981ff"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>u/hvHrMTDPgNwQUqx9IMlFhmP30=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>P9G1Ak3sZ1vBtC3L7hmGturqjESe8ucEUTjAMUCcgUBh05pn+zStErkJnfEU5IMvNwCG5Cmtd6zHnAte+0qJSsicWBiJNTSW2d42OeVDu6O5NnPpQbzxd6vyRgHDC5zWLYtYPnSc033D3HMafbnYSUDoIo/jEZxSxMAV+A8HcG0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>MeoXTPY2ym/BU2J0WHR+EjuMwJFo1eZ3zmEz0Ejc2UciBbus/yIluX/o8m460Zul62V1+0+3tcemTJexI48zm5T3LCkyY56sLby/ucNWXvPLyfxAPXMdWNvPyTVbhQg1MJKGQqtizT+VtcxvM0wqW/iI8A911ZijVfeGcvH+KR4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>VC/fZmpPmBTA+vE3s2/tqfOP6NJwDUcbKsUlk7eLYJF5mUH6afvBE9xw+jU09YXgIrXPeWFQLqNWc2hV9KoER9/KCwXbOPR8oo2qcKxRkVBzTS5DrGKS4NM7smOky2tgFPORIvT8vo+gkai2qhn/X4AVzap3crflvcfvUxe2SI0QVavjEkJcjQmgUhHhy4yDYz+Fn44c80+emh3UPdZcllE7QqX9i2crZdMhK6V3IuQUFzYI/W/Mr4B6gPJbhjemG5pPk2vaWeHIxsk6nfpWGv/vpmjRw5MdGqfVfEKsxCqjSIuhQtkVlJqNfUC0eCUzF+Bs01Rdlgm43h8ihUN0iZIv2qeLT/mHZkjaNewcApSIi/8lVbMK2Is94mGUIpwGTuSIiNZ92kC26CcTyt4+VCH8/rKQABWUCEkGKQgzBTwEuHsSFsXbYXIbgxetPCFRNp8lcybdeUZO780MliqrxmPbD39goQ9UUOHlpAuZt+Ck+MYKFfZfN7xNlaZfKMXqHLtqE8760wSZnA0r5AoUdr+UOzb9eYgR4Atn5ml7Nlt46pbMg4CXYVjqEGdvu4NDjph3CkQ4BnlAfogxP68WhH7+y3SqJDM9t6iyo6Ru1qWHRaA8ol0pmlTAl0Bf02Mt6l4IzZlhByOYWkzne5BI7gI3VkHN/vbTwFWfxWVKthb/uw+HCJl8UgRFjxOqfExEdjNSDNoe5kBYRk0EUox2URH8lpUl6A7rURfELNOF2ZvqFEBT9iDkd1m/yHWtPKh9kfuymy+e2Mmm6ktKlWUkZZGBYolv97H6cBeQ1uLKCaHdJe9QQz3r92oMUFS0H344TYalf5iyhqkFYg9UBW6bDtwiiAmu5GdtwHydWI7oI1guqdKIvGx4s09O4om7//OAzV63ke0onLgUBEsFGCPp1/XMJ30TlXGVUV/iOtp9qaj1pXBp+qy0/qo9vBvnRoI0C2fTC9SbDHZsAQKb44U8vo1d/TKL/VX/817aHWuUTKmad5O5jhA35SMkzk8waLutSwGnEJISL7X5Y/HGMDLsY7QNzRMjmp3TIBfu4uQQhLo8+aXdXU1+Et5uI10oI9NKBLBHPdatIgnFEndKgk9fzswUCvIheLuTrJTd/53p4yEknuEHJ87vU80Fh9mFBp+tvQwfGtqQeAvHyrsBL9JtXPNIPppP0qOUxeoAjd/nhl5IaT/lFVb8eV/BbEQvMc0OZu5xgoqWsaQ5BQZz9ZaJzdfxrBOloIqViveDGeese3W+8y7GBGlPk8hj0nC4XeQbk4FdJuYpmimknmG0BTXWzafOJ7loESwPEry06eB5YYIAeruELcr7pYkFCcTMHFRUG0WHcABqTtlMUTGJ/gV8RdiOa0Wv+faeVjJNxNnO9sNxerXNqa2+aY4wfiChRwOWJ+OMj3maZX2UP+DewJf37EkyrCx1vQf/ILsf12pWmcIZYQhbs5XHkp4MzK/+a7cULKY/0EIyXnMxBV9dwLanOWzOvUwv+9Fv0WCNBKtNuAGfuI03MNDv8DgTeBTQ6kJElmOwmlWqZmxHl1t1PGoYnwPQHSrwRWGb4zP1fbT7jfMNeUF9as4imbxmBGi7UStsewHEgaVyqjAcyQQmPlTO4PPSWzMygHb0sU0jvWAWwtcoZLM2vCFiutBlr2MIKWrTJzw4O4LyWwgtKxVfeKwGbcIsAS1VdKPJqF0jfp5LXl8g1yHyMTU7kDzhbxvW6CM8DYpJunyPj/bOhBEnoUoShziwKPfYtQkMs2mX7eN6gfCk5D13L0NIYYCwWlK1iIcmzD9Xi2JV6xRpcrwNKN/cYfLBF47vdhF5Sd7j/6hPS57V1Qvy/YvbiAcHrl4q2RiZBrr0dsZViGjknUt04+PTyAKsXPurdSNdCqJKSnqYeEg+KNO4hPVvs9iELbYGQZ3FDULZSik+sSiyQVu0ALwMWB1EMWJpDz+ALTS29QGjl41WJH8VD3coAq7GbNKbRhnmOu2HXCfIuWd0Ljg7QhKc2QE0SDgHlb+fAWZGR48dmGVkabGgj5nvXPQufCNJ42qZni+Fyp8M/Oi0JjpAvcwo3Ceabn+uzqtvmu3t5dDyryD0YiLDdqaXGxPn8sOoOETrgiXwzIl+PmY3uluijQnsu4y/GqzGPM9WHenGVnnACTFslzJnEh+DJZFqlLn0zieZTnuaPzOJJueZ1uCL8hqo28Va64+OTnxqcN/WOm6Ufpq4ZL66FJ7GLyBw6zHvHC11LzOnzOWqBr44+mWof3au42kA0BD2pv4oDc4ULRjAgUC4CCoFice+4UNAYosi965eIxAWBrIlkVecU7ge4hOnsJ0fnBTiQjcCY3ePyfM4cXBdMHaFYWzBt4Bv5YaT3nBo4ZDVS3+CbrpNDNfuVOZVBYqnUH1aHHLt605kSysi7+3elZKXHD1BD4ORUc8g0wC1bfPtv/0kfatOkBG1PHdgkXZ6jZBniqUQu+nVxW2BQvA0jgi6xlGnCL3s557vis6hXtnoqoADfycRhDXgw6vPXKUekakYkGxqLhT7CBMPr3hAzDB4bL7AlG3o1pwiId8eC620jWqYadZTpXmhw9L/5QS/QXVtB1PNtRHcUvQCphgKDdxGtTKzexWj4sWvx+7j+CPg2wFwZt5nw882Hlt18I6NfLGfenIDsC8f8REgod+inNCHT43En/3x0W1dv+Xva8OFOCFAHYVWL3cp5BFJkZq5uPDOW9Ge/xGrzE4sUzaMdpGL+wuL4x8/DhTd/jxatYdsAbJrOqRRodr5C7iZbAcCwGYBDk7tYoP90idyyndFmd04wnDQWlpi4e2ylRq9Y5qsJn/wVmuykIcnWJc/1LPyaQlBaLsQcRURVSGI8ruBRteM439H+YmfojMI/T9UvaM3b8XUJkjoak1CtZamqVPkE8nEutlv83FRgWOX9F4=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2d06a68e-af0e-29f2-f6c8-95a68a2c07ab" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2d06a68e-af0e-29f2-f6c8-95a68a2c07ab"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>w/QAbbrjJxDmGlBUd87w9RlmJsg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Lck+GOiwz6j57xd2sUKXZTPmbhr0L1eplJnbG01Dzj5kOtHh5dD4Df7Esg1/FKj7Zq5ppKcMEtx0jiKqmibT0hss4dhYudh4KfZrWUWv+/cf/bDfUobsueAmQI1yFIBEI6YunzvOtvW78ZEvbFdHzDRMXsw5u2BQ7DPrG895fgU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>OvPPLLoyHOIuMC73vOEBt+lbyuN3L4E2oB2U9uqgOnp9kiiYOuvAiCJuqc4L11U5pjA4K21xSn88KAKTH57tSdcOXsPCyk8ZSW2pO8wHg1IJ+vvu0NRv/GHcrZ8FiiP+94g303KJPXBqR3PAC9/Vw2TQwSRenF+THSg7Z5mfFJU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.