Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxb2540fa7-845a-ed22-3d17-b84013e625c1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb2540fa7-845a-ed22-3d17-b84013e625c1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>UgLt4WsP7vDU92mtG90Jaa3giFE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QYoOtwHpHzVrx0wG35WuAsZB0JuvFnSpq0f9DqyXnt9GjJom0BGiUS7F3xMX5FnhovYQYrVr3U/9F4gFx+A+dDUt0MJML/XdOKTI0zxud0rHo8pRZF4/gUK1LmimyM+ztlyYYkEl40h39vFMeMXFxLO2Nhxf+qEh2Rf0pBQft8E=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9d4f19ec-e1ad-7179-e2bd-c6500a585163" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9d4f19ec-e1ad-7179-e2bd-c6500a585163"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>muv2kYkQNq35L8Dt3aMWnhn8ZIY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CbLOWnRrkIeJB4kZm+DZb9dI0cQLEbno5Ka93faIbIUDGawQFSS+g8n5Q+HzsTlCPXAnWJdsyu/cigy3mGpSWy+UKyWpuxedh2ZoWJo3tW6m11cNSnl3NHkXN9z0TNKXk72daFFhejq59WmGnzGOUEwscQoD+LsYVyAH8XP8sBA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx88f48622-0063-55ea-1e0b-d4040f0799cc" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx88f48622-0063-55ea-1e0b-d4040f0799cc"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>1f1RZadpnj4DX2WyORTRc2b+Q0I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YxicaPHw7OzfkC0kX9+65OsBzi6iQKgApV3qXLZqmWFr/OgLyJynMvScaJY1WbKBIhEWa3krr7HdluzN/c37AdIOMv2GIxhKM2PHAQkSCo53faqhKxDV7hiKalOtonBdzJUdaPl/Nq/By8FPvQglIB/tO0HI0Bd2j7d8fPHq1KQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxacced7ec-ba3b-07a8-9a07-f6a4008db7b2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxacced7ec-ba3b-07a8-9a07-f6a4008db7b2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ts8hk4rG6Jkx3eSNp9Y+eHiw8lI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>DPYQi8Ylsne7n+yu42n9G6eUBDyYzcDnEQdqVlnqi6s5iN0N2fwJ+w75uPYEhoDUtlWyu2KHIfXNfxlKgSd02i99GgVH6jUMN4R7/Sq0WWaFlzh3sJdlWnEDSYg1Rqqe5UOu7WBL4ZxJ3l5Ff5EgPhyUtJPSHUC+z6iNM+rZ36w=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>LBDDk5thrfVFqSmRUw5iO2A1hI41/d6F/F47m0RVflvNcitbjOQWbUdlFaNv9KCGIs3mYDPWCTO+uV+Oxgp2Fcx26cDGQjNESCXq/9J00w/nhylEAauWp5kUCFIDQV/5m88L6rGHhD+sDltD8x9ge0SA8R08juds19cCHGw7EEE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>tnwPNrhid29eoay9odBAeeBCzsUE1pbn2BvxsG9sh9owafpqSQQq4JeySE5/RUhrCdtBx1VNAH0ZLbo6ezBq9u2XpVZRMFSCq5t07ANU/Q3z1BnxMzt1HcSZZsWBSCjFkHvXUTzXo0imi6qjUVg41/CdOaKnqy2GiZ9yJzqyYu2q+3aSn5lXLL59XegvmRPj8G20cy1ORAH3l82OyO79avQgUiCRwPCcotyAi1hWr75NBv+RxEGuO4+/AAb9v/w7OzDSyfvBRsp/Cj3bzvNEVSEBVzkyzkpVFmrwEM+KSHDyhvUgLtRB8RqBUXghmIgG1dhHOJXDXltCiWvjXVglefZ+OpRms/UyqmLYAEDHXPXpIbL+g5c6lGO5tqnJCH9qfs88fNcPutBdewchGRyLQQrOfa8tEwUlgQ4XrAWIzVyc4RMJQ45DqDMZh8O3688gXt3xRM+afsslWmezySKcSA9PSmuhawDiYQaPglT9lxLKW1qLIsEPqf8I7aAedgrr5IYVxTPxjOEUka4W77YCZtT9w4rjUhqBlUWcvYy93BYgeQJcxG9PfxJ1d8bfQDYlwPWmEaTT/X898YrOxkSSNiLgK6v1tgDh9lZAll90T9TlEA3AOdRaW0mKdqjUZocCkthN4KWZD8mNr7q56l6IuC9UErOwvqDCPRbxt+BU9UExlPVcpCwfPeCx3H+dM5n5CbnIMzKagmG1ggHoDwrOeXRs3Gsc/pktnD5TuCbdArEqRwnw4w/5FxtbYP0u/0fzKeTaE8s19QTUydPP4fsLo4GJr50+qjEA9oWvuneXNrRqlTVsUKUozGXalEbyNpshAIsLJpPGhNZafFMQOg/Os5oS0yrOJ+zpPks5sf1Lpi2jTwu2ZjTYrjPRsYL+0cnsQQq5XGtIzRIORSOKOzaxPII2d7Z5qRPjGUHehwr7dBv5hCqFjXeun4+xeNIdsiaSS+4XkQRUnqhv+YkqZeXHtfU8E6cYL8wzmBEAfJSW5T5xQj3abqLOykPJo+w6ObonK9Rq7ClOCPjSgbGqBa0soXkGJTkersNaweBerZNdJvKln+II3gb3Yeewu4dOTk7Vsc4WYc9Xc2+Qvm817oPl2GP0gYr0SA8gnsu7zCF6s0KUF8T1MRwzt4UOd/g/TFZmu4CB3mLMVl8k6xTS+8nWi0TSce9HTIKHZAu6cV7qjsnNpnXg/XpLAkUFm6U05yAFfZe+xvJFNEma72XEqY5VfaYlauXPx0dkYKAiV5PGB76b1o581ckG0gYcmMW3cPg5cfXpLeufcN8NyP+YIrMTbvVisQY4yaE2SgK9LXPAu+8w0Orqr3HQ+ZAMneZmhyVgpaS/s2uPVqtxKJMvb/01i3+HYCBP6nmWsJ3gISR2XOCOIpNCLdDKxySGEf0mwaaxHCp+ajZXGMqSMjwwNLtdPIXzFQULWpenMO33YCmaXSJB8nYvJ4L75yO0Y1G6cQ6wETajJWnP1PkAng50jbb2j9Xa5UaW7x0GRNrYDp2b6UfylEvK6/z22TGnk2zfWaUWF2SMsWLcc4PpYiVtgLCcJdAW256eSLWCePyTIZ4LEOIS5WnFNarlteeayeb8w8RICAaGoZh5gAzXUhxzKCrE6E8HCZ4UZzO5napMftcU6VJ2jDZx73hoJEiU0ULXnxcUhvM5J1Q5/84WyGlplOyyT/yXMjPbHZCUMUcTCvrt4aQ2dU2ZbxQd2n7fjtja0FOgJrTP9kudC6JRS60Gkry1SXcpn99P2XWpMOZcRr+T0PGBkKuz4yRTe6Nd6OCiViKfQip9VPp3ZlLMN8DnbEkeFD0auZNC50fbf9fAwRCj750yqix3MCyw1FJp7p+faGRQgN4y2VpTm1LerUBhH/sdU2TiWwHkv7UAhL/aRKge1ZuCjzbZSdqA3rN4PxMaDzns8skN3a7rPBPj0EL5UFZqb/CrqI+lsJQmtSwQa9YI9sZ8PTuNbUtkRYetfwJmrwfjW/s6f4Ci6bAl7aFncv6IiTDHZ9fztTJUm9AkcCA2B+im/VnVoGtxJ4XEASpzPZN5DHbOIyBTXRHXNNKx9tUH0X7ncooYL14HO0p/EfQG0voWpqbw1AkpxjCsAvAYXqE3IkooVB+vHBQiawW6mbfxCMD7XVYq7qBtMvhJKgTys2LkpL7n/JtEtgc81mmvphEMuA9PbsmOO4pZQSpFJqqETESrDArK9TERxDekd4ZrRlFv5wjETYBO2qCS0TSTc3SlhVSmfgtD+lZQE4BoEUX1kTxYUX6nxhdlEwcdwN5jD7D/Fs03emcvUCW7cibp4B27w67Gcyi4fnNBDcAkFqRLuD+bEj5eHPdOiAkXLdO2VGwMAbPq2HWLZN29VeQ0YsIAwpcgQK44j5825zHebw4pizYLhpX8eIpCiGbbRbfflu1BVO/7bvaNEgqY5SJujCFCRx/qSLCwJgdCFqXa1W5wadFL+63c0lKeM7EyjZCPEyazHLpYlUljPsLjC40/73CUsRO56Wsny4KvUdqflLP7u/4lR44RVzZNiMII2SINf0rV64FC8v6iuGo6upuyRB++WuHXvhXTnKGlrGwmTZ9OVJXlosFg62Hz/oZcUwBz9wp4xwwAKK3XckOIC4OM2KmhC8s4WsXBjlcuZJ5nQ3E8cTNJby3amHOBbqmbjJDQ7q835sUqzHDXYgLokQ4lSZ4X41DQDE6a6qQUVaX/a28fYgyhoyGbFG1PKpcinrHqn7BlA3MNtHZxj3r0I/CIkI4WQgf3ZH08tae3FsyZlp9iaOOR/SojXjzq48c+ySRnF5X8LVgHKQemJVwaa6YmwsKdGsI1JfsYwhNnKzOrLrEHe/zWh6WL5pjsKcJCQSnTQ40kWXpUtX3n3SksLfhp79/gnto1wTpjBa3Jnh+WtZ53KLj2SgmPhM1E2+YfpUhYIXI=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>cvjeiIjhgkQj0YkeOkfaRx9nkKo2L1aErF4jwZUJ7sU2VfT98aFCnz+vc5OR4ZphUy+kyeEv+gRgHZFIOl/wjkZ+sDNH9Y5L+z+gO0HLqothIeGGTDLJ81duKzhKxK4mMJQdS6VqkRlxq1R7hqw4Yp5fjpB5Hd4KvF8a7jHY55w=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd4a57120-8640-bb2c-3cfd-917f7395ec54" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd4a57120-8640-bb2c-3cfd-917f7395ec54"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>fvu6+7IAjgJp03gYDDU2eMlZltk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WUPBovRyeoOVD9NC/pk+Qee/Hit2YDH2RVI+OJgWUZOOc3hH2PLBwJyPAVDsaV5tG7APT1zYv7dQF+RdYlBOIedSyu50yX+EJ5tAtrBk4N5fKaNJViIi7UoUuyEZ58FTtdER6xXlC5k+q55lJz/ljQP6DaNwVJnZe6JARUsalDs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>LBDDk5thrfVFqSmRUw5iO2A1hI41/d6F/F47m0RVflvNcitbjOQWbUdlFaNv9KCGIs3mYDPWCTO+uV+Oxgp2Fcx26cDGQjNESCXq/9J00w/nhylEAauWp5kUCFIDQV/5m88L6rGHhD+sDltD8x9ge0SA8R08juds19cCHGw7EEE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx7b9db89d-75a8-966c-4bb5-1951cc3624ca" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7b9db89d-75a8-966c-4bb5-1951cc3624ca"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RvzddhK+rIGGfGjqRa6jboMmLZs=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>czz7Apo4S5ptuqCK4wUlh/AdKaKLzmYKQHDmXMP9hbdUTIb5lm9SxMWmdseFOcVUDPaAfKqJsX8M3nxcICToocT2o4rehtKaxguStNaQqkwIc+uv3B4e+JRjU0Z+7FJ2FLkNc9IumrjcmcttPsCiXSlVQhFrXuqSwppIPtsAui4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>cvjeiIjhgkQj0YkeOkfaRx9nkKo2L1aErF4jwZUJ7sU2VfT98aFCnz+vc5OR4ZphUy+kyeEv+gRgHZFIOl/wjkZ+sDNH9Y5L+z+gO0HLqothIeGGTDLJ81duKzhKxK4mMJQdS6VqkRlxq1R7hqw4Yp5fjpB5Hd4KvF8a7jHY55w=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.