Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx1b81e7c1-39f0-0033-0245-0f5375996534" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1b81e7c1-39f0-0033-0245-0f5375996534"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>iXJLwZCyPn/hlDYpYDlB4ppwj38=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BstX9qXJn0xvMH2yTl+wkE+FDl0G440hIdSFddoRobvymMAYd8fDP0Vdcs41V+MYqAB8wC/wmN5kjKnON8Mx0yC8AxLtosDoxl1Ge5i6HzyuwVPtlb+F5oTcSId2GSEKFN6iQe8o4SYi/qEwWPtAogRHa+/5RfFdZtSc2camtYA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx80a7d5ab-ee53-c033-7dd8-e26d5376d023" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx80a7d5ab-ee53-c033-7dd8-e26d5376d023"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>WBRJ6U8vngGyAfSAdcBiKF5D1S0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tK/MuYKrdy1XH4O/Z0by5sbQnXmgxYpyziEecJo9LU78XqNR7DPlgEG1EYTb4+RX5u+YexZzJhBOl+uMBBaN76bCD5sn3EyiLhlvO7XTUWtoWFawEQOu0JmNCTC7DYslhVMo6/XaLu4WT1pKCbRvHWtxKGYjulN+nUpZWCnSqk4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5c68cc6a-0efe-9446-7928-d2a650295524" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5c68cc6a-0efe-9446-7928-d2a650295524"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>YLADtqUDWMIJfGuxvvC5tJAYUrw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>g0FXt0dGMA8bntAZzuZUXAo7ZRB1j4NbfyIHe/lcVD5SVC4SVoS9N/5XsdWuAJ9ZDWRiMz9MHY8ZRM2W7M0k1tjBj8N090smY0XwPAKoD8e/q0SH+EzkPSzl36nalAsJmPKKCvMN1r77wkyNqoFNSlrAjy+qVTu3JCDLb86cNYA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx57d47dc1-8cd2-14ad-07cf-c43a777478b5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx57d47dc1-8cd2-14ad-07cf-c43a777478b5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>NIX2blRCl/jz28yFgl0bZcUx6U0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>iRbuRBQMUDUgoJgGE63AhiV97xoAdNNbk9c2L6VkGF99A/fWGFnYrvZIiqG/KzHMgBw9A0apCkDiHNQ5CDoi0m5hMAjx0uGT+REWxGqpmIStzc5PEyVjGAeZkxYTlJU+4l8+5qv8ewRp2kp4M+M2ReQj8B+t/korT2erKTF/3/Q=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>THP9K1FvBLLRQkDSUYvJ4egwkqIBSwyX4iq9qmw0wyBoC2MVCOkISDEeE4Jq9LCYeDcgy2MUcsofm7lIZmPlOnYhtfMopcQJoH74dGLD5i+gvaZAMelr3uXtE7e7PYDhMB7fyxxVlEOeXeERvWsGSpIMv7JRKM/9owI3k5iWRWE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>3pprISY+qQUfHfD6MQuFR53yzWmVk5m20WdU2oRtP/m4pK4hnnM00MRFzeAE97NsQ3kTg8BaWKHMwtk8gzrGhTFkC/dAjdsmQIkxIa0nXi6264gEaYxpWFi/ci80q/RynThNc8hFyoWvoNkq/3QM3ApbgmRgTqrB4zOEEi4KqZd2GGlSiLGq2+b09sg5OyICAB7nBchLSMMsI9SsewyE9vYAV5h25lCckK1LObM8Xt0jmriss+1yHwtHXvLT1LjsTW6y/9ALeefwW177nWXm/E/86UhrDgW9KTztl7QVd4ZW71/GnSnyyAYCy8uk6+mZBIN4ntPAD0oR9Lcd+OMxz64ncnCx4e53kbA8KVTD21yrh4FpcySU6+t4Ffh6d/qHxDviTSaZZXAxOkPSR0BQ6d9jc1ezp06o34/dS9LQUEqmz9yuUndV1h12K8wNhH4Hk5jSGk+IqwLwGMSkuMabK5yNa5LJxK/K2dShc7MeXeqeWe1mqqGTNVmCZk1u5Ka2VrXm2ETVVFP0DkMY00e2OR7BgmGo2lktK5VWQRadvzNW+WiiYjgTETrOdkjR7QMq7ktmSiUVkbNHyCjUOW7C+lFbQmZVQ/EXSBRg9Mpvz07VxbYPCVzeVAgLa6sZWPn7j09pMZrFWjTDiLjEL3kFIdX2m3NupF0JSRYm6jloNqaiirHa6k2k5RcXA8/G1sfwWQ2tpu2ytMIHOcGdPPKAm3b0bidnPTBjlyoOkD1F910hkYyBwutKfxZKmfLAaSmdpXxlYC9MxO6tinVKsDBnmGYJqEIW3Bj5E9KZ/LxQLHuNcUz3lXbqVFPQdU+UaqEbnq+2rmWh6dxefTJFzSSxAdS31ZOh3Gp4myDyaSpV+sUvNUpgqgCLcS1z+DmmZbEphumMzmlMGxox8mDPHlByNCcKL9opLAcG1HklFHvb6DWKn29ZxxMQ67YbM9Z1kVS/DTbrpMDMR/r1kzShsVxJWAqf1B/L6F7+CLj8ZqZdV4dnfe+EiKCQDVGf0jBhKBXqYqOubOtjaIOAKjyp5sk5uhtUBfiFjEqUEDXSQSsTxQo2OzgFyZDF559QE9Txph20Ak2iGkm8MD0hPtOc5EWPhAKjY8UvrjrKcOcFU6JZvXcEEn3HLvurLCXYDlnhq/0C4NbeGaosgAhKMSU6UnRGLawP2uwpWLJ42jOfQNHAtteB6TjriyjAjvQlBB6aKAQsc6+/f9wA4vNSAlaDB0wn70xwVaJDn8YzvHXjcXfp5BAprR3UVeViPWAsy9o4D0P1K/xglkOkB1Y7piDCdf9CzZjSjKIYzj3ExPGQ4QH/wiIaqSblKjY23zL5xt9FqSE/V25lr4FGq8cfS5fKHRgTBhIcBrMPw2rLl0ftahKcvXDKoxeR37ML5eWD8zqnoBbf+D505xRV25Hs++dKJHx6JRYB4EJR7in/OmqK/lClA783TQjR7tALLF/hUgCNX9eObx9rX/+AAFk/gu+aCdAWp3JZsRZpWUnXI/QimY6fHgAghH/DrwHoFp68W8r+4+HucvGmVaG3j8fBJH8Kg3o57G6/jRdRFMVDZT4vZ8KxF8TuMEUtEps9GH32dtswBR+NPnumMTfWao4DPvg2/duUwcq5FAe53J4e2OtPABAPgxYVxF0R9idzZPQ65vbxhFgowBa5LoX7JWyPdL3ZSvRRaUj88CgWq6CZuYupFn87tRS/t7rhAtO6mbrdEdW3G1Bq9inLAopk6U1S5vj5HHzxLJGDKugIf7l3sLiDzBtqWvGZmK+XSxNhxFIZj7aSuj8vlbmqXl4tdux8qN4/tjYcJLZ+dA+YG1dLY3mbKzwlljiwp2ALKTONmJuzGIYAlokklyZWsQ5fDAi1FZOkPvojF559+BQxUqFF18yQdz3wXlApiBMBK+OZkK3Tbwy+6YR0SLhRwTZYQcj1OhHDIbeUAFRWG3uoc5RQLnrYewMSe4Hck7LJsk70n057X28YN5hbEV9mQvKkfUldoSXARcRWkQn1l4zoxIwLsWrnB9PAl1T9bOyDcYi0+2gCuWl76IY6hOpyr0j17KAghwLWelKXGxANwXFPThk1m2eQSlblpqt+B0heR5VnWzwQwwsVwx/CQW9+1g4iRveYQdHdVAyPhVMG3VII1YBoeLx5BxWeEryZueh34F0c0u+tZT/Jc3i5bLOffy3zX88WUm/7xVNndO2QieHrtpcV9wsNUlHbIcndpd87TOxjV0Jab9EpIwFchcWit7rb94+2zOnf4bh0ishwDN2miztwWvp6EY5eJxbi8MURZx3L5ACfjE5gjCBXOGpsEDuEcvBjMFdCed7bF07mRZdje1e/27ZkMRfPY0pSOK+Y16UkEP+OASMWYfWxFAQ7FkAHo2K8gsIU8yGOqQ400H5RwQo2nbeA9AloIYiNcEoJd4pxN9rwAsobNz6aDh2dmUG91GO9BSGVz0bpx2Ad66NNi+J3GnGJXG1kDm2z3Gv2Te1SaEs5YGxQzZFklYCyap9wMU1yCH73pgnRdPHQcN5+Sq7iPXayn6tga/hldzig418ibgQ6t8eup48Y1bTYAhuMQeTc9LXGY0iXRwBrPxRAE/erjRSfaXXop4ej682h+zMmNyQ7ONrsmPW//GmLHN5/7Y7qSmci0vh0NQ64p8Z7RC88rmf3t5syNumO2DFjxS6zkflB7hxclKxYRlpw8QQd15LtnxTB47arU5+ZAIgsnojuyIA4SM3v4W8kQ/VWrNEqeSg9kRTkx8iKicXLZaZhOWQJxRuWJePNzVD0ZuyhemOBlWpnemOiE4GD6aBMKfZV4WiYvY1dlmXZo9U3Anca2QhVIIyWejF1lp7oqx2J2QiR5AARJITv1+APmAiba0NkVbtcqY2ugh/Ul9B0g4SC3Ql/L7JdHYmM7eONMUbbYvq3+5JbTG+xwXY=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>cUVG5MeCjpg4f4/YRjp3BzsMrjrkEoLXptXMPA3/kdOL2aFa0f1J88cGPNxYG4DecJdLbKaFm3ceVxeAnHJAf24WvTr53DeF0ZxbSFvobtAYuDPOGhH6RK+lvP5XsH1jwDCZEqiRR9s9S3AUptetPBAdtHXBh/ixiqIvVG6h0As=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>mhDUU7U6GtGJOvX5byx3dxWQmVevlBC6uL6BgGqimia1uj44TnpKWe1QXAw0ZM+UvrzmWXrVTEUauRNbLIkQPqzEzo+7/S3qP9ZesGpTd/NrMw6VoYG6sGB1KxO98imBTUm+JCJUuVy/1/ROW10phZgIJpo3rIeiuT3kaJ+ckn/vi7NL4+btgz8S6SCDM565ibMG2hVv00nmLqyjf5FdP4FK3kN1ZDAUge1F3etOuwMBTnR70Nh5RUk36pTTMyGTf2Vt4cjOYUSA0JCqTUKaKjz4tCEUFXi/AKO4cNTswwok45nzWVjb/QvuRzEaxzrwYqEEhWQjatm7asfzRCGp54l5ohksAlhuspWADetGV74IzE+9B/g4VNNtd6MkSUSjVy0imHtE/egB6cNQLvvLCRq8rEQY66/ZOQHCsT4L3yhncCJnxx3Oe70rDKFk80TbZ9Z3LcZGPqKyN+DotZDlG1ch0Wu9p1hlnOHvk16El2pMuShXyk9wvz8lpriNk41nN0qJ+jsig1o+/JaHJfaTjPFwsavCuwxJljdrY40Weaxw2dQaLyrZdZD7aXJ9eJtNRpvOOqC7hZzUegpBN+oJUSaDJFxLEzqQCv6ImqTO5C+6OI08y4Kl6trz/Z0KlnERRigwhiq6Pb1SgO1fjpcKhJtyLdoznlcwe1VF2FYr/iliFayKuNPmGtAcA6CF9lHjq/KMjPYEN6B4NmOju8hctRIEwNrHzZoO4pcmR5S3r3SaT/kBPzlY7KTfpN/1MS4yYZcHsawybzIFrEjmAZa9Xn2p3eaAthafKDQY1Y6DaADzvNn2iWDYl4+sOAJDlnJln3HhJzahng5ZYU7Vmqgu2GUqHru+WduudigCMu5l3fL49I8gDYZhPLyH1S9Or87Nn7JzpEaUOAfcD96IJxuuH/RWboq9mI0vOSOwIMMT57ctlmyU5vPojARBCeBtp0VWDiwYDCDueS2w4Zk7U924jDvN0TsdJv9lQEsWNzFTNNP+ttJTGBieyBYiVib5QWNUHoaQkqUTM5cXDYb5kIybZVHtJvUmvqpsHPesvk6q1xWXrUgtn7jWmpxhhhw4CWiaffoLMyVPkKglrHKEGPzMnSoGn3o/mnK9n4wm3TORcs+E+ghvly9zmN3PZdVsDAQZImLIoNPjtrd48kPkLQE8EZkl/e+l3Ra08S+nqITxcG2Yy30q8fHeMb1/cNtrop6iFkL7i8z7hpQxLU2PvBbe8CJGs3i38x8i2dvmTozF8kMWTnAwpLDJfZyidK5NNrYdSjyq+n8fE2/dVYXqhuX8XOiLUFJbLBfyxKhl7/LRa9jUXkgX3/a6BPtyIeLqArNOscLQ+hzkebxBouveuXxvtX7OgJoEHUAnzU5ST6bLOzD8sh78dZUlzmAZ+Rr36rMOxWvx5gLzIkAPvRKpuGvGJ2lt+U5t9qN1/gHyabuiebN4LMds6NmMsHY0HIFwXau1oO7m6RaZXDkQjZTtNFPSfeRl3xG9tN51TqnluKE8DYP4gSn7Hu5nqjLe4t8te8QWx8VMgWlrh47VPqqxLHVveGCiBatgcHN3DOpgc1OAtDnBIliHtnpzhVc+MC/GAhLyVqONS4f+fGq1mf5iCS7S+WDMGLZmq86MfPk1adGxyFbiYDaW0/s7lB6LnPt/ZKBMViRtHW3+Tq+A/z5/HSxZm0lHQiOdQwm+GtOFtt8nlbtzK2ITIDpZLjHBdMb9bQcmL9ncrSDauXrGd7X6CXarPOwsvfCreetPCNH82s3cBEZthUWD12zyC+0PzuiobqVo1dtop/bLxL2QOYu5D8Wtup4hXJI3G0bDarl2Ki7zuZu4ez+MZLYCvwKMf/+PZb6knN3TQzR+Cdz9GO8WOH6KMLV0pyinTl5e9IT5fzklXp4IFfDAZaRSN9vFX2nHTV4dfydybQzC4JJAZMo1togFsWWeyI8ZPiHvySif+B+civu1HWKp074e6DltnE1sUOkPrQC2KtNqoGyGtaZJ8xbUKYLBfUt4jCsHUCg4TMlOTs6VzO5AevpGXeAOASQHkPgQxh8H3UajvqhvmxbrxZ/nujtETrO7qYlP+hF6Okax3dfE6zjVM5JewREDxTSSV2/1Oxm4uqL8hakSgvUq/vdJ/uiaNDx85dwkoxHRxfC2la2EHBPrukSideAvhQZibwg6UdQuUZDRldfVLijdipiVtvV2rbO4HlIh7uNZ03CVr/ZgvNY/EUaUsl6Ml8HfsTE+0EBsSpNHyTVOpigSfDNVHRAi/uxwXwP8w6SgeMxYBB29j+KTvd3iWdJ1nq9VaaehZxXvOgjsdO6TZJCeHfiP/rumUOj7Ff9dye2qqL+cVPaFj/Sq9cKX6o0Hk4YtSA/bdCDdDK9/+UZTahplOPh8eRKYB027VGKD/Tx31P5QoeES0S8Qnx7lm6x7pqKe/LHg2Nli3O5mB4FtXy4zXmW3l/tIOqLkNeenMqVsCbCYfD/cwueVfymVocGAuK9RPYgJHjOMglEiduGpLTrXjPPFzNneeHeu0wh+/b7NCmtB8OQVVONAbtyNLtsoNz0izajqvhK2J7oiTuSIlfKLHgUyNj+UawVypIJwuzO+T5rZ+pbyANZcNjT0PZMln+xgdUujHtVdLNlf5Jjy0JT0mu40F3qmDUfTS843Px6nGFDiP42ohex4Ij/EQIzu/wm38fNtpx+zInY65lwktcwWytu3zhA4v5lAlLYvi2xR6qvtQ2ngKRUbjBzoGMqqCX8u04170ewEoK/xvDG4x8jKVhv7TFqJrz6lnO2koJRmkPTvfB7Yqmj8ZUUUz76+Y87oDTP/Z76i/tyk7D1Qsb0dGxbDbTVOb4m+2I6CzC9AM81Z/ZUcfE8LHT1GN5VYDOUhJZaz2CSCPZ6tqM0/q2Z5B2vCaeLInFrPzWVkaAzHwK3TXkZuTALvScTby1KHE3XkdMsMmbeziaMSc4p2V2IgOtnHCbbGT45GsvnQaqrxJexm1Pzb42bVOZvEBUg3UZ0IiLNOl1kiGLP1xzy9vxKiKWX3YmkvsWP7pnbVo6vftRS+Uqfz+QSv8fN3oJiI5ZNOellD8eMyk43F2xm7gzma0E44ZwBaijmfVpWkH084fuUG75uKJBw7QaSFxSHuq5ueP8nSh11IqVKt+PCdi/Gt7HqtAu/HefQoBWcjno2FW6VOBZfQTXDwkcwpHUGhCugNj8LLQ0FFJZ9Xrj/qlePHZW2KyIzmTtv1sSsZO9ItNkycA/tvCLtJeDtdzsaSyOt5VllbfgSjR9uceuYMYGpBTXo88zITSaLeSAIUt4Cj8hE0anTrbXKodIQFh1+yCxmUE1Cz+0R1TMpDTsk3cpCiG3Hsnz26lo/pW+lpLBfypVplNU+JCy5IerxxIs7nl7WbcMqMmiqIbI+RJHgcpGESrJGOSN/0gQMQEscDsU1h6d1oQi23CMPEhAu0hoYEh6iFTjmm0Ew13iiY7LFUOh6Ir3IE4JBfcqZAoW4k2Lfq2qP1v6jHuTfr0ri7dRtRoOJPdTtRnyNfZTp2Xc2vglver4vTCp6B8oGGDoW3IGzyxu8rYla22noIvKxpS3x5cts/WLhEgke49ICVTfo+SD3vX5PndLuv/ZyXLWp9wscD6JNu4hzlmsBUjM92rI0jHsaoUbO+Bi4xFliVeXf81mWkfqki90ss+tChhWRyXtOyy+VoKx3rmL4bqNJ7XBCR676IYueFTbV87PqEysbvu1Xdm19rd0h7O4IIUm4cgkyVk1MRc/x4LrrfjZevpgx3N5DPfwb//6DnwrK6pWS8cVjFmPQhABoPXayJhmfgAy5BepIRo2OGFwsHWczcIF3KsLqktyTSNb0KPVcxW/pDVvynD4ZtRj60E9L2CY328wWfOOlIwE4Q+rd8gj67K3tq7t4ZCvifWXacMi+7vGn7TGUt5Bgp7UFUebu9jPOXlZrmoL4oy1DOdnzHQvo74/H/lH3eT81F0YZas0wCKjPKEPl2f7ineouMgRLLRIxSeGQSuSpauKC0Vun0bq1/b1flaw7Pa+LgiGVRGOfRXCh1pgaK8yeybM+DYSFz8CFATq1GLSs1my5OqVIZIQFX5mjSUorsCIkqxkq8yz+WuaYot8V2/mW2vxGYGvqxULm+J98h0hUxYaUdzCra+/jZfs5B7abPzD+fLhIl/3IGwOgszbaXACMzJZ/YQ75ywfCymug7wpDpy6CNN4dQ/oviVEx9JB6FPVWOfoZEyTnEhZqJIi9Mgfk+E4SijEqN/akGrQZJbVP3QsgIOhpP1LkEAEz67vjSosX4OUr8L4hP1I0xYbqYxZ4e61ipYcj7pccapYiVj6vp4jP/A4xYU28iJPnjF7MOFrwWBgTH9vypdzzGpCx4mldDqjcOi239/ge5S9cLIo6v576MsuNqitVy4qbjZZQJXwQR2W8r5q+bzkCD8dNjq23+VTcx7pyMSSe1smFxCx2qrC+CVfM+j/S7cecMGsbs+C8eKtlI0VBeWA9MByf4AOVkmvdk4Dw5lz7NpvXMswSC2nlEAp9zfauusVqxqjqzAZBTKge+SIguZp4/4wukSD/NCgWFwGxRKB+36zZD944qEtUjOVmeY6Oz5It12uM+EdH+vFcMDgK0gryiCKX5Mj5bx/NQqVvwKR9PrJ/z1rnno3ZBkt2wqbFT0HJZu8RBDCW2wHtl/g25NnTAqX/BXyvxhFAUWjj5nz3P43PQs3mZUDrKacY8oOZHkYxaz/inABEO8QpFAmNVBqlo88HVJb5vLya/4qoins9lzykzY8UbPizaCBeH7xFZavtt7XC/q2hmdQevvMZ8U8/ZAMndSbXrcnLh1r/g6WmrhBXm/FnP/ETFBsjOpxC4CdJs2WdsT1IY+xguIa5TdAQiIK5zT0+L8d6SAwaFJUjIXLW89wON7vScn8wdpVTfDTFUPLeesoNgq5yu6GjOiR4CaK8zlEW+kpIjAUvShhnZ8WvPE7CgmflKEymaf4fIpUEhg7SB43pqDzD0R7Cj6XrYYMW3mlF1WcRW23CoRg/D5nza44cWero11U/yX2Gh2uFa1t9K3u3JcnUyMeodQMEtMbEq5Xvdc0PJcl/NTlK8of0UXqfgxGXosxrBrlwUQ/X4cU0soMI4PuIV1i/0qIe5FP6aXwAK4R0gJA8phelgcMy/FatR+XZGS+PhfcGg7ZuQ9dvOMIc23nFJBDz+eBHW66HGSvMVwFtdvER9SXAQPlWeb1uH98RoblxDS9Z3lk5zMi0oi54aI/aBLRrBjJOgrSK7uMzmAgXKQvfyYjagM1xBIaJqX2iASUcHnN0Qpv+A9oQL084W1XIFdjNGrkwNu6W7CXfeHAHFVsdLTbZxhyjXmAZzB1sGc1/TRjVP0nRSAljJDP7U0Cgggarn85ALaGkv7HNfuXojWxbBwjN6xJrql2i3Xikzy31yvv8GFsZQubgNlzIW98k1FcclhVxZ5zd3uGctzge8wxYKN5f9Rbbgg6np2C0=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe5405d15-4fd0-e0d7-be89-48b3d0942d70" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe5405d15-4fd0-e0d7-be89-48b3d0942d70"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>h8TOQ0kuBG14fBjuAIyLRyYzg9Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>T3StCwYM2lNnANOdet7fCmrTdHIGbaa2DALbAquiCq5XzAIPzQocbN+TV+aUM2ZXZXhLWAnjpcBKvX+YeamI/88zEVPj0LcSFakL5EwbT1nQa9KoyWni5AipNTzqigMp2vhBRP+e7daRQpDtaBkUkLYDjI5D6CR1LKYjy54BlxU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>THP9K1FvBLLRQkDSUYvJ4egwkqIBSwyX4iq9qmw0wyBoC2MVCOkISDEeE4Jq9LCYeDcgy2MUcsofm7lIZmPlOnYhtfMopcQJoH74dGLD5i+gvaZAMelr3uXtE7e7PYDhMB7fyxxVlEOeXeERvWsGSpIMv7JRKM/9owI3k5iWRWE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd7697475-0d9d-c95f-47a3-cbc5329d3a81" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd7697475-0d9d-c95f-47a3-cbc5329d3a81"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>OR7CfEEyVVzcaFyqJSUWPmtAqPA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>P2e3oKDyj3AxJYJm2z492Wibeiobx3QDOD4eSppqO6Xtkn3r/LAOrNcbIphiTk2ajn/gpJ7z6KZJYT3cPRhx99syJv5T4yo8B0qyyqNEUk5mG6xTHw9dOYsr+OfZ4kpoYGP5WZY/yk5/DlHQjhwek5+qF0k87PEMmAo59cwcsSM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>cUVG5MeCjpg4f4/YRjp3BzsMrjrkEoLXptXMPA3/kdOL2aFa0f1J88cGPNxYG4DecJdLbKaFm3ceVxeAnHJAf24WvTr53DeF0ZxbSFvobtAYuDPOGhH6RK+lvP5XsH1jwDCZEqiRR9s9S3AUptetPBAdtHXBh/ixiqIvVG6h0As=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.