Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx070a8c6d-d9f4-770a-c037-e51499516d32" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx070a8c6d-d9f4-770a-c037-e51499516d32"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>MmfF5w5/zvSw1m5dApB6Il59ugY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>eZxtcpLDYafGj2OUja+KmcIcKc/aGn/gX0ik18JS9Vny94jL1Gf8Wl4kapqqDuu0jJWLu5gGGNFx5orUqh30NlnTZWsOo/3KzIMPIz/LSaGhYzKv49Zw4K7TeOF8JJ1yT/c4Ol8LqY01waPx1g/La4iOy8T+/VsI8kdOkUGjodo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbd57aa8b-9565-9a13-de36-2c917de888bb" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbd57aa8b-9565-9a13-de36-2c917de888bb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>AoolkmJ712tt6/UgZ349/U4m9hI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>X0Pm+uO9erlWiptE2MT3I1y+DgtezQSiQllD96bYAWQfKjavGCM1frlzPSn/3IqKIWJbSlMw/IEEdK7lxK2SSu9nmSKbM39IEa/ZBtiU83dlNaukrw8NyWE1m1rHZS3LFwbx5YiX4KMImj8C0SgWwLeN36zYV+mmNUKi+8li9Qk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx946062d7-4e5f-2ab2-c1b3-9699ccdfa48e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx946062d7-4e5f-2ab2-c1b3-9699ccdfa48e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>z1QNCOy+W01jKLhptG6j9iYAgSw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>C1fWckhdQcCa9lTglr5IoZ9yuC6MV6Ea5VXrb8PT+NOAybKIhY+O6Eo7krUEu2WmHfepU8WrljGCIaOJTPNZkzLQrGPMdGX+9CvvH6bn8XXN8Q6jZUlctSEHsdMf1upyWd01zkY6nqVkmZ33SCY3plgII2QfCFBFqk2FCdPH6bc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxdc58ad90-9da7-8983-db02-a746a19124e7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdc58ad90-9da7-8983-db02-a746a19124e7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lWfoKH/+xfkuQBbnoPXiyflHYDw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>f7SHGb8mBTR5g6mko3CCdKcmYScalVWHt8HFC4qo8zayVpRLeYF5ZzczMtdrIENltLKBei4bKBBd/r38aOG4vC8O0wLMH2I+2gyfPRIJzZyUCWdudfRakYTZ/CnZZYyXtkjlEsFpXs5saqrZHzFO/aNGuw65j8rWEovrdfBfEbw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>CTj8A5kQhwpjTSRBB/AicXqzDl6L/ueZOUfNALW4MBgWLwK2Ml/PqG0vr8/ahjLhDGcVgJSji1QF1UtzArgj3RkH9yE07cHKSGvPAdOzcEGzpKbPgMJBgBGtSvzxbXykVRbJJ00yvOM2EVQDqa/lpOy9MsaFZI0DREG2G2wUAvw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>cUmhdORD/pcMx2xdhQrySIeu2rKE9UCOZ4eu78CcTEUyquijzjuYnAI/l9AHYCOQGaZdKAqzq0JkRuEuNaoVmknBPpuqw7aciU0J4cJ0TGhEXW3Uk5CffiCMHQ9kBxaA3v+9Omt2k7jxgR3sP/DERQp+8YN/xCo/QX9kpp/w2dc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1a519d2c-bbf8-3ffa-d5e1-d76e9c8f6145" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1a519d2c-bbf8-3ffa-d5e1-d76e9c8f6145"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>14Oh41LTgtYuobskzD+DM/kEHYI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>bnTkwqGYUYqOHcgYluUBmJZZkcUR0Zn7ox5Wc204vDVrWehlEZ+0UaOp2WqGJOnB27HNmb/aplzD6wcoslCTMbP4ryrbNTE5E4u1G10FxsekzGHRnZ+c8DPzroTumCQ9bPaGOt/wUSPm7EVsn7YU/+4ma3AV3Db1FWWMLS9p3V8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>CTj8A5kQhwpjTSRBB/AicXqzDl6L/ueZOUfNALW4MBgWLwK2Ml/PqG0vr8/ahjLhDGcVgJSji1QF1UtzArgj3RkH9yE07cHKSGvPAdOzcEGzpKbPgMJBgBGtSvzxbXykVRbJJ00yvOM2EVQDqa/lpOy9MsaFZI0DREG2G2wUAvw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx74a2a516-052d-7835-74a0-d6f73525ef99" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx74a2a516-052d-7835-74a0-d6f73525ef99"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6Yu96Tt97h562cDhqIMSvGoHOOg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>2VHClDE+QYJRzyPyB/oo8P3ij+hqy36ck+y86XIa83htH1RQpmx+J2pRA/1fAYFusF8+FZKqc2wW8fTPmRnrXcVpu9DhU0qse7F/jzRJ0W0k9Ksh+a9dn6I/JAcUpzNbEUoYCCBs/f6+MpDA6ZPCMzxGdCAkxX5WjW9UdlKmJrg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>cUmhdORD/pcMx2xdhQrySIeu2rKE9UCOZ4eu78CcTEUyquijzjuYnAI/l9AHYCOQGaZdKAqzq0JkRuEuNaoVmknBPpuqw7aciU0J4cJ0TGhEXW3Uk5CffiCMHQ9kBxaA3v+9Omt2k7jxgR3sP/DERQp+8YN/xCo/QX9kpp/w2dc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.