Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxe89dc782-3560-7bdd-55f0-f8a9a1ab576d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe89dc782-3560-7bdd-55f0-f8a9a1ab576d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Zt83+erYEzuAl6qZhbaaafcQOC0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>apLJwMN4wcwkHlr4OwliBBxYySl61OWUqdySw5TLiVgB/kHg3uEOO2ndV06iblkrShKRBM4jQTuLWn+FVCXrn+ZcO0nyNIOdcWvl9apUBswd9Iz9ver/bpjP1Z0y0eU9c78G7+aOEHe/rBxw3keG5HNIpVlm9CPqenaagHxzIhM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx274acc0e-bc0e-7184-e736-947fd8640d6f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx274acc0e-bc0e-7184-e736-947fd8640d6f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>btQehJsXoOeDy2SwiVpfWMNlV/w=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>eAdyhKxJPKgMvgN+iqcIntOjLnHy7v3xXswM639OuSmzCrKHq8du4qstdzsUM7oSr08xwSapFrwob6gH/Iokbb28zvUO3qA2e8VIuNwPC0phrXchcoh1flM+6E9e2YOMykBPd+4PwMyJnRXlYxKtMBE9PQXxHOmV5oP7/HODZQI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc794fa41-90c8-7521-e31f-ee5b7b5bbbf5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc794fa41-90c8-7521-e31f-ee5b7b5bbbf5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>stzzokvSYK4t/szEcP19CNHvkAQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>N9mfqxXnJ4TflINr0K88FeOKEIUfWDXgO877hvpnmVJ4+1kyXyXqlIwT4LRU3NvXb21YOjXL95TRZ/kCR+XryUhu4wVcbPGrvvVALH+4gptEVUZSl/WPJYNkySgRhQB5pcoOdwpYisb95XOo7ZXYmavHDlZutaB1DiW/gBfsV1Q=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxc328e8b1-8a25-671b-1f10-76c8b41a5262" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc328e8b1-8a25-671b-1f10-76c8b41a5262"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>cwEGLYKxFZaSy++sctXfwQJNOhA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>snTg7s8vWJMFonowISGUJva6fl9nr+aQaKLFcfrhyDk2hDY93MFBY4Et87uEM757xyKQ5fgMKROXUm7PEAUkjK7ilzG+DhbX7kVGnkjUC7rt9Uo0DU50Xz9aOxKJ1U9Beg0HjVjZOChWP4uSRmUFNgqkGzwU12tLwXszaguLHC4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>E7u437WA8MixaDLEXM2/GPbmLyGOYL7Nns62SCuT/seIF5U1sWO8T/CYZ/ZWCsEQqekJb3mOZmySoo8VuhqUuxpEAKESzzBYOFU1Y1u2nbkK+gkb3ouzjMsKG2tkm7804mclOx4dF13IWU1O89M9CWN48cGvA36vMJ6zXqZQwVA=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>mY5wf2/OsLYsXFVYmQSR5m58Y4nMZoU1a0EOgQpUvg9vvuDrTSove/5TpyK0Msnfc7loSqh5LcjQDKKpXSyqY1bR07zo0jUpms7RaYjTMXBwQYbHy+v49qx+eScs208EB35EtqJWdl8RZ7BslfqsSQqHvcpm59H5oa5CEk7CXQ0Eqyzj9fqANVsDRwuBeuSP+GGoBV16srs/CgkyiT5npNi6YNO7Z3BozXeeX5nFmaVtz2Bu2WwELfmaJrVsnrvL5o5ikAFBPQ4eBp6DSr2Esuw/iqwXa9+iag+AH/deuFhc81Jeo8rtjyUPB6zqhhkg4Gfd3i9gFUROPlQSNddFDjHRFBObiPuuzBzrs45dANXdtaG6b4tc0TtdKXzAlsV6WaNqN4vt7ipzktzIVbM3MYqQ8DHEWDqJqwk4g4MNFbUhRZqrzdz4++Vrn5aG7ymVt20oRHHZGoaKY7nJrHm/khVx9hyVXo8AgDJziqvBfh0JVc1h6zbJut0Elpu6P4XbsBtAVhWBiVBHZXDBMwZXRRxIL4ox2wbz+ltDC+Mx0L2lkgLLt5xCFsrpqmih02g3Pow4CGN6oqLY7+r3tRKOJ8H5gI0IlgJZ8AxnbBIsuA9xSxsuG81hcGbk7IC9/Q/lF8y46gkm2lQpz7Ew4wC7nXCiYo4dsR8/FrZ8TXM12O0aJM/pbhJX4oiqE4EBDrxNgwlVnioaLizwderYVK/y13fHi89Z7GGjJ91ii0rLGqraO8uGRfuFjyIzlfiCYOJHxlHWQpFUaIkMGmVnntHnRC58qX1h0T2Hgo6Yy0xie+OtETJQzhMlG9hZYBZ4vvOexS3QAlxBrSjV/pbV1h4sF9j3WG8C/KyoG9wznpHuEPsHE/viZgSUz3G3HTJXVCmGh83AhcO1gNegmNA2nKuPi4hcBKVKMkaPmNeQhwNPZdj6iPUwOUZmxSnt1Wp0W5rbzJTXnKou8MPqbHNG4zaQvvlbK/5hrP8Vr3yZ/2LdnQ7GsneitWWj0pKFvVfwKlZTtIgaYR6msT3YNFv4dBak+1ifb1mH8DS1LaKxeUFvw7yC3UgnB8B5EkGjuGAnCGwts9nuA9IO4lWN43ANhNizndj40LPsthn9DEXy+cp6stjq85tBCdvQdlH07kbSSH/b765i/IUwFejpG0fbBw48e3QHRs7bZ/MM1LlM6w73G0Ka1SpuOS7ImEN2Ks9ChB+emWWaTn21nlioCRvpTyDBgssn35W5rBqIgfkI7f3UoMlizeEkwO7iAHVI+QBxuRpZLmLt5opmlhK4jKdnAj059n2gNb/Y9R6fL2nI9/N7xOdgyHzk0SwDzkOKJm9femG2UboPdtaGsTpdENJv3TzKPuAC+XupTY/VndjZ8YqFsn0+ZQkhA/j/sAwjSYsD6JWPVzv4y1ks9IF6W2Kvm3ulZMLUspk+IgBbXnA7bRrmOzzNxr1YPEYBVDX7JcwKEGP5N0V5rUSuKi8DoNg9Ry/v1Fq0mw7B5zVwpzV57OdnTMu2CQXMgO0hn9Y/ecq1jDxU1qOF9kJ8i0PhXcd7jka5b8X3E+Ml2SmaOozcJuS8EkuvWf8xwlr/ZlRXoS6/iGehhRza+X/7gZ74UA+KDoFNeeE+e2vpeFXCSfQ7ynyJA9xqEavtwzK9qCSYNmt7j2nuW8F4AGPyX42Hzf7epfoSOJKPO4Q4eOlPjkKYw3g6tlgdhyXYca7gJx50JTdctgMJR6ZnBoAEbi6P96PFs/nXicGWbG2L1FLP8OMZIOaqNVT3v5jRsWYORB7IpkVz+794Dpbve6Eo6irnLLpdaC7lr5dcxpjDBBqXqk95DeBD34p37Fq4glxeol5LPCBNv2Bde6nVCb9lL+lX0t/uFa2AykZq2U+VyRaG/gy68B7WgriAaX+hcuHRgriaX1lsqH31W7OnKZwy3qnUWPBi4XVUggYD3VC+PSdSaOATkU6UvsXkaaMMmbm8n9UrDYXTnRH/j8rvcrJEMCuOXRTAwr8PqOuE4/5XnuE1uT9l8sVmu0XbsMKfdRN1i1uvlAxNVIZOlp8pAA1oHsmeaWwT09yI7FhP06Nc9vwuyPDN0zIx2Gr9gDY3dw72OfcrmKX6lfe+TkeexBp0UUIzr/Cm3wkuFsZHQzT3oC8/xW5Zx5vDva4O3SvyrDRdahqWqkBoo5nzLeD+p2fyAQet5aF6eVv5g5W6Kn3tWG4gMGBmVrLJVisFoS13Jl5d4BUaqVM0f2ePkU6JgUjnvtvlVniNtA1sIyPa14/QpASlcDBERhyDpoZig2R764yrWcaXfMj9KoCUO+qUcupgjJPaadSmm/biEN+BNugoE2b03ugm1TvwzoC3bmXv4PcQ2yMSwiLXbPsjaXDBNeW5Y9Z1v1jNlj86YVncQbRMvLT7SNhaWOyWE9RqriFpONtYpL0aJUOO1Z64kpQFMLCvivv34+qdjZUWJzBiGS7FnjaPNwlSb8DgvL6ZEd7egnNyJicxrjmjKvN2K0N1H/Cl07L590tXdrkFHHd5A93yUAGOhbeao4COpqgITck/ou7T3wC7sXRprfZIFUs+kN+nKdUCmYnBvV7DXSCEHCODare1vPcVi3/Xq1FqVlkgc1PvV9LgNS8mQCUf2rm3ZHEUVMYC7TJIAmW2Tjg5FYyjTX6oVitWTiAH4WavcJoVYMCGgLcSOTXly6AA4aqwIJkw6eelYzz6SAZOC+TELnqQG1/QfKlRZWCrY9igMl/OpIRSn1V8sQ8pTNWXETDtGR1M9AjLmVld7NJGJEN28BB0HEc6T2bXeyaQlVGvOPD/6HhLX/RBLKm15MWYOKIr0ENkaBw2/SrqG+xqifMKyrxsC1vhFrjA06UscFeqrCYfMkVfFpTeJEd83Z8pZwlXKl8rwgveEMqf9QGuFfuZSWH/w0+iK7eBFl2GlII=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KH+AuePmxzmoeAoNY5lLiH/aaG44PcPJumiFA3RMKmjnLf3SK4u88z7xFZVwYXIpX+bNybfmeMVrtqywkgRNC9273Gyy6Hi5N0mHoQholhwmCGpyeEWMecKYS6G44gQWCNM3c/jLo78lJG8hX3R1L4WPT4+g1agBXsREt6f8Xxs=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4032b356-deed-32b3-d8dd-a102fec9e2db" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4032b356-deed-32b3-d8dd-a102fec9e2db"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>aEZrGxXP9u2lATPDFGk9L2S9G80=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QtF520KLKEfk21F0ixaYG3cc8Apaoj/tw8SZR9AOJd/o+/UlXXdoLW71++pBB96Y9MlC+h56/z/Ozw8VJtDwOnQfCHjEOoX0TQHbehXFXIvKgqbYbB3vSS1eshBsQO+D9MooJgt/q4KonxgonvFMdS5J0+wOKyXr5s/msEujv9Q=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>E7u437WA8MixaDLEXM2/GPbmLyGOYL7Nns62SCuT/seIF5U1sWO8T/CYZ/ZWCsEQqekJb3mOZmySoo8VuhqUuxpEAKESzzBYOFU1Y1u2nbkK+gkb3ouzjMsKG2tkm7804mclOx4dF13IWU1O89M9CWN48cGvA36vMJ6zXqZQwVA=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>mY5wf2/OsLYsXFVYmQSR5m58Y4nMZoU1a0EOgQpUvg9vvuDrTSove/5TpyK0Msnfc7loSqh5LcjQDKKpXSyqY1bR07zo0jUpms7RaYjTMXBwQYbHy+v49qx+eScs208EB35EtqJWdl8RZ7BslfqsSQqHvcpm59H5oa5CEk7CXQ0Eqyzj9fqANVsDRwuBeuSP+GGoBV16srs/CgkyiT5npNi6YNO7Z3BozXeeX5nFmaVtz2Bu2WwELfmaJrVsnrvL5o5ikAFBPQ4eBp6DSr2Esuw/iqwXa9+iag+AH/deuFhc81Jeo8rtjyUPB6zqhhkg4Gfd3i9gFUROPlQSNddFDjHRFBObiPuuzBzrs45dANXdtaG6b4tc0TtdKXzAlsV6WaNqN4vt7ipzktzIVbM3MYqQ8DHEWDqJqwk4g4MNFbUhRZqrzdz4++Vrn5aG7ymVt20oRHHZGoaKY7nJrHm/khVx9hyVXo8AgDJziqvBfh0JVc1h6zbJut0Elpu6P4XbsBtAVhWBiVBHZXDBMwZXRRxIL4ox2wbz+ltDC+Mx0L2lkgLLt5xCFsrpqmih02g3Pow4CGN6oqLY7+r3tRKOJ8H5gI0IlgJZ8AxnbBIsuA9xSxsuG81hcGbk7IC9/Q/lF8y46gkm2lQpz7Ew4wC7nXCiYo4dsR8/FrZ8TXM12O0aJM/pbhJX4oiqE4EBDrxNgwlVnioaLizwderYVK/y13fHi89Z7GGjJ91ii0rLGqraO8uGRfuFjyIzlfiCYOJHxlHWQpFUaIkMGmVnntHnRC58qX1h0T2Hgo6Yy0xie+OtETJQzhMlG9hZYBZ4vvOexS3QAlxBrSjV/pbV1h4sF9j3WG8C/KyoG9wznpHuEPsHE/viZgSUz3G3HTJXVCmGh83AhcO1gNegmNA2nKuPi4hcBKVKMkaPmNeQhwNPZdj6iPUwOUZmxSnt1Wp0W5rbzJTXnKou8MPqbHNG4zaQvvlbK/5hrP8Vr3yZ/2LdnQ7GsneitWWj0pKFvVfwKlZTtIgaYR6msT3YNFv4dBak+1ifb1mH8DS1LaKxeUFvw7yC3UgnB8B5EkGjuGAnCGwts9nuA9IO4lWN43ANhNizndj40LPsthn9DEXy+cp6stjq85tBCdvQdlH07kbSSH/b765i/IUwFejpG0fbBw48e3QHRs7bZ/MM1LlM6w73G0Ka1SpuOS7ImEN2Ks9ChB+emWWaTn21nlioCRvpTyDBgssn35W5rBqIgfkI7f3UoMlizeEkwO7iAHVI+QBxuRpZLmLt5opmlhK4jKdnAj059n2gNb/Y9R6fL2nI9/N7xOdgyHzk0SwDzkOKJm9femG2UboPdtaGsTpdENJv3TzKPuAC+XupTY/VndjZ8YqFsn0+ZQkhA/j/sAwjSYsD6JWPVzv4y1ks9IF6W2Kvm3ulZMLUspk+IgBbXnA7bRrmOzzNxr1YPEYBVDX7JcwKEGP5N0V5rUSuKi8DoNg9Ry/v1Fq0mw7B5zVwpzV57OdnTMu2CQXMgO0hn9Y/ecq1jDxU1qOF9kJ8i0PhXcd7jka5b8X3E+Ml2SmaOozcJuS8EkuvWf8xwlr/ZlRXoS6/iGehhRza+X/7gZ74UA+KDoFNeeE+e2vpeFXCSfQ7ynyJA9xqEavtwzK9qCSYNmt7j2nuW8F4AGPyX42Hzf7epfoSOJKPO4Q4eOlPjkKYw3g6tlgdhyXYca7gJx50JTdctgMJR6ZnBoAEbi6P96PFs/nXicGWbG2L1FLP8OMZIOaqNVT3v5jRsWYORB7IpkVz+794Dpbve6Eo6irnLLpdaC7lr5dcxpjDBBqXqk95DeBD34p37Fq4glxeol5LPCBNv2Bde6nVCb9lL+lX0t/uFa2AykZq2U+VyRaG/gy68B7WgriAaX+hcuHRgriaX1lsqH31W7OnKZwy3qnUWPBi4XVUggYD3VC+PSdSaOATkU6UvsXkaaMMmbm8n9UrDYXTnRH/j8rvcrJEMCuOXRTAwr8PqOuE4/5XnuE1uT9l8sVmu0XbsMKfdRN1i1uvlAxNVIZOlp8pAA1oHsmeaWwT09yI7FhP06Nc9vwuyPDN0zIx2Gr9gDY3dw72OfcrmKX6lfe+TkeexBp0UUIzr/Cm3wkuFsZHQzT3oC8/xW5Zx5vDva4O3SvyrDRdahqWqkBoo5nzLeD+p2fyAQet5aF6eVv5g5W6Kn3tWG4gMGBmVrLJVisFoS13Jl5d4BUaqVM0f2ePkU6JgUjnvtvlVniNtA1sIyPa14/QpASlcDBERhyDpoZig2R764yrWcaXfMj9KoCUO+qUcupgjJPaadSmm/biEN+BNugoE2b03ugm1TvwzoC3bmXv4PcQ2yMSwiLXbPsjaXDBNeW5Y9Z1v1jNlj86YVncQbRMvLT7SNhaWOyWE9RqriFpONtYpL0aJUOO1Z64kpQFMLCvivv34+qdjZUWJzBiGS7FnjaPNwlSb8DgvL6ZEd7egnNyJicxrjmjKvN2K0N1H/Cl07L590tXdrkFHHd5A93yUAGOhbeao4COpqgITck/ou7T3wC7sXRprfZIFUs+kN+nKdUCmYnBvV7DXSCEHCODare1vPcVi3/Xq1FqVlkgc1PvV9LgNS8mQCUf2rm3ZHEUVMYC7TJIAmW2Tjg5FYyjTX6oVitWTiAH4WavcJoVYMCGgLcSOTXly6AA4aqwIJkw6eelYzz6SAZOC+TELnqQG1/QfKlRZWCrY9igMl/OpIRSn1V8sQ8pTNWXETDtGR1M9AjLmVld7NJGJEN28BB0HEc6T2bXeyaQlVGvOPD/6HhLX/RBLKm15MWYOKIr0ENkaBw2/SrqG+xqifMKyrxsC1vhFrjA06UscFeqrCYfMkVfFpTeJEd83Z8pZwlXKl8rwgveEMqf9QGuFfuZSWH/w0+iK7eBFl2GlII=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx6600b138-7020-33a5-37e1-9b871974f209" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6600b138-7020-33a5-37e1-9b871974f209"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>yw18c4k4NPiSI4fevsBe/5tOvqI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>vxFJOMYczgtzSuyalrhQa1gqjwBbTMoBHizzLFRzKQm+/EbUpQGFc4OawZEXctyLnJ/Dz6C3LvXU+GEcU7NFWbipfa9vJkPSgwm/zjHafBV0BXpAsYEOVD2SaAZKxqCYfVP93BcYXPksMd1TSo/2Qm7HIs0NFv0mloZUnu9OsZE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KH+AuePmxzmoeAoNY5lLiH/aaG44PcPJumiFA3RMKmjnLf3SK4u88z7xFZVwYXIpX+bNybfmeMVrtqywkgRNC9273Gyy6Hi5N0mHoQholhwmCGpyeEWMecKYS6G44gQWCNM3c/jLo78lJG8hX3R1L4WPT4+g1agBXsREt6f8Xxs=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.