Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx750a4d56-45f3-e48b-bb02-feb1c1bf7691" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx750a4d56-45f3-e48b-bb02-feb1c1bf7691"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>g4gDO5iUrQHxW1HQFYrtOMYc9u8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>nzTgCwxz62K3uUynWfYYhnvi/x8G8RVt1p8K4oT/wyIGHwITNoCtBkzsBTnnTEokSvzNP3WozouUl2XWeV+CfKbONwdRWz/zks02zMiXnmM1AswpCQtcvUvdRTbrAUq5uBxhcj6DfQLPyQMbwJWXE8z8nuMzZjbYs8UdfRvjOFM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx88baa05f-8d5b-dafd-e0c3-0c26cf3aab73" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx88baa05f-8d5b-dafd-e0c3-0c26cf3aab73"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>KecWcVaI3U/rc1iHYgJAvXAJ94A=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ZUdisSymbND4Ok0PGsEZ8zaFBbxaOJwzSW7IXq06y18ROQjafVsKD44p42xHbc02I2aFuW/50RKnEv6Up7aDDkCgK/1q8cDtUFDRrb5QlRCohQhVCbpLDRR889Dd35Xd0NusRFYN5AS6+rfNV9iPJevdE56GuA3JGaZ1lGFc8Kg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx7e08ea54-dcee-b3c2-a8e9-b4735c3de0f3" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7e08ea54-dcee-b3c2-a8e9-b4735c3de0f3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>vfHUoZpTw/VcfcvdB0HFBSQbZBQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>jbw6nMgZ3FruvRA+Fsvp/wAtKJWRJ8FLhPJlNQXesTo+rMFIuaZ/Ylm7r29GrisjTjSK20BUqz3R+jrtkLLJNmtYSgpXFHRheVn7uNii8wtP3oxOw99YX6fy4MkOFYsTeNSXEiBNJ+uNX+uP7M+GKdDlyrDSWcI9TMSrsmULlOc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx07ac16d6-2db6-f5e2-02a4-0a7677c4a098" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx07ac16d6-2db6-f5e2-02a4-0a7677c4a098"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>i9p09mxhSxI6uaZNwhoaZHYlEtk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tK6jHOjPSVyrj5aoqYoqUPmf9fj737oe2jBOlRPnteBNcJ0DyvpVEg0nqW7lNuA9fTI0vjKJsQ8VMZfyzDvFBrY9m5ey9spbAbRzcjp7bx/H1MDuc0Rlyd0m2M1AIOM9qw4q+7Wu3WuTVSbzFVVrpI7cxI1nF8xhVSnx6N1unwo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>qRDTQ4oQtQOUVqfwRyynwGXWcULmaFuLWl8Xy2SL8Vdvbo0dZpfFbJLsfGPTUalGkKKOzlWypBXaLmOCoLhBc2qW87nfsIZNGgPHvZWcbakf8CMvC+Fe7deC34gTiD1BuU0GDZUhEUMYs1E/BGXSBphKfGRLSZDeiq0lxhfsF9Y=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>RT6hIqjPKBYs/vzbuljqaOEN6EdQpoztg5fBg7IsvWrMLctQWSEEnc8l/Vj+1t7mkrGDjflt7P3cxs6ZXjrOFoyrUYWE3TqFS9Fh+3e89dayVrZLG41Pv6JeVz701PkISaz91dbr2prHl7wR/ka7MiViWA24CS8iqg4M6P9DWpY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9d079c4a-5d2f-fc21-d841-7addca967418" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9d079c4a-5d2f-fc21-d841-7addca967418"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>wwhiLRzczF4Ckw8dsf+uZ/0gvmM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>D9MMWEVvqb4fHCnmweq0JsYzw/gqG0m6bz02S5DhapNc1QuS0fbECbH2A6OLfZBGhErw2HYd4ukQqGoElO6eHZOnBEAh1quLJKaWUN4XGn4EIYHe8A7eDB7pA8g7/kEg7AUsP6H13MMQnzLYHMW6crtPB2kQTsaImjQSTEMXKJE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>qRDTQ4oQtQOUVqfwRyynwGXWcULmaFuLWl8Xy2SL8Vdvbo0dZpfFbJLsfGPTUalGkKKOzlWypBXaLmOCoLhBc2qW87nfsIZNGgPHvZWcbakf8CMvC+Fe7deC34gTiD1BuU0GDZUhEUMYs1E/BGXSBphKfGRLSZDeiq0lxhfsF9Y=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2d257a16-ce68-b8e4-1f73-71136a4806f5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2d257a16-ce68-b8e4-1f73-71136a4806f5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>fD1jBFQ9EytCj88E6gLIEi41ko4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>L6zEORsnxN5D2o6WmEeW9rRPEbazMpgNCGFKtK18KJ2Vpz/EUf0Rz5Sohsnv3IfL9lTzONtavjN2gUgPK4K30gtPcGmK61TO+zRwGTsiDQbaa1vujY//d1Z2v2v3WG/X8OuEhCsaY9YrBgMD4ixK0zXWP7tyvUMI5ORbr1mh1X0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>RT6hIqjPKBYs/vzbuljqaOEN6EdQpoztg5fBg7IsvWrMLctQWSEEnc8l/Vj+1t7mkrGDjflt7P3cxs6ZXjrOFoyrUYWE3TqFS9Fh+3e89dayVrZLG41Pv6JeVz701PkISaz91dbr2prHl7wR/ka7MiViWA24CS8iqg4M6P9DWpY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>9GViRnVicrhHRRLvOdiageJqMOfE10HFH0e+LlqhygmGvUtFTmPjKRwnoqPYVEeW3KJLvyqRmWnEnaaCLSz3CFAOptYpVmaXrF9xgO2CjwzlLx6Qm6wme0MXRAUNoztFhfXJpzFjhnPwyV4AyaoxVHEFTZGurd9gf1i43wm2uRvZeq4l6xp4YvnlGEXD4lMr6NCv0olLIED2P5Jj/IXhE3Z+dYVfIofyqx0zLVHnCvcuy2WyqbNhKlKDjZOp2PDUcUUvH5oGOWWj6EF83ZTkcjaB9rz7S8ImnzopbhiAXrP9nxHygxGgqhfK/6v/V/T7krd/r2EG+ntm3oxCwEZUj84FLpGezMgxjoGtp8CcM8lIl3pmuNpE+ZVGbBaHd8ZFbivEFSk4P4vv2KPf2vTCvlJFkBLmpy3OvqcGocP49AgiwujdZANRumNsVu8RA33QdVsNTx6SgAz/riz5//v3zwDPacDvpx842WVpl4zqZOFg8sjPD3vMlvMhMDrFCH8dw4sQ9H+jRKn4uKVu3tRHij8kuTB4BTWta1c0YsBV2+Ww+QTNjFZwrg6MhDazyGYfD89mlFBQqSYCtHvM1JmkCiwpp6+zBKZ1m9VqVWgYfp/eCBRsSKXzk0c6mdrP/xzrXdbzM8hxdTy/WxpXXvTI2/s2Wc6/Isr/6kELtFxGRtnetBqqutLr8B/EI7B6QyK9c4CQMJHzBbQgtK3th+Ompxezw9dfrfAOsa0gg4cthm7bnE1nZdNX3nFvV4IPt5DUjeHK2HKevMgHXS783KuB7pDf5NYccHimhi3uHn2o1sORObKX5nMblUC58w63toQDSy8sMerXRY1MTkQ0vtf26RyQRVbo0YPmIoG54PQwWIaeil1UuK90ZZrlRTnQlnkVv23mI6HEnIOZa/k87RQpwgQ8UlvjR+tHd9t/IYr5snHofBQnZ8BYkwMDCiRTcGE8P1u/W+CjSwTbkWY9Uw/9Ep4owT5b0C+ilMB24kx7b2aeVZWZ67hl1JP+z428YlM9qRUM6PCtU2Cl+AOqzjDVV9jqwwy/BrOuDbcuNYexXfpYAansxcIgRSn3IhSns91ip5HaoIfKBStD9vzWMkyie1ovun9m1+euSHGI6gxnKKtDjBa1o32b4RY/0Q0pt+lwMch7spci4gyOITChdYT/lzvTU2JFoSCYdWGY1F4NBuS1WfxdGFXTvOJZ/38mvVPPuprL6wCQa6vKPch+iKQC3R7j6rd6A9ioZ4v/g4TTdzkTGOeKh5x6mSAFJg6xVoG87CtDKxzdVY00dyCByyxFRZrXCGApiO2BJ+jHNOTd3aNdJdXCrGbaJBHFCk4yPay23K1QL7jLDBh6dG15jUXQgklPe3O6FUP/clJZa+/1YfQCZDsPY+KysSYhv4ow2UivFwl58rFtf/0R9jT4tHWU9RUCaCxrPH8zxutAw642Ezo22hfRraXSBWoE+WPnpEK64Y7IwU87N8ZMBLWqjJxlV/0EVJCm3iCAG+DRcTYMSdHWKcr1CigQ7MNZ0CJKCq4JAuotRhIWyuAdJKg451jRD6TJWYClW0T4oVILIE7wk+C6CqwO8VE3mbOQsyHAiYFOQ2UGYBH5W2MrHsHX89cZoMv138wEUL6KMST/P5V6Uz1xA3kY5bNIvcJ58ymbbSiSywPhybDCffYyfAuR6Mdy0+mmxLzKAtLlObj/xhHHFJFaMvcN62VLIaPsKe+ML4lgioDBEBk7r27kGmo4WIvwaN5c1dPPUovdh79eBV0tLD5Jr+/g7U02l53HcpWU9JBCUY7g0Zj94rSTKPumBnDLnj5Xj406lsL40gyfMMX7omhbIQkcM+zXlGsQfGWpbnPVZU5HHfg8Np0msD7jC/u3rFklks1KXnSO4PbjLmyEg7QmW0GmlKjlolTpx6to/BMUek6beb+IIkF/Cqoc31fooWd3ijYoFG/hV6SgbKGhqk3Urksa836bCJWvrwufHaWViuTkGKOg4dQ614Uc8oTKKAbCXmx4f/VRF+WPg66Hf8BqTO6E+kHyhA8e1fqf9xuBL0aLr22+VxJt4rTk37lL7ABs3tZDkL/D68aBKpLbrm2xNSWqCv+ZsJArBIvpK8okVNirSqNMFzuaPSkeGQvWMTgq5eacaP034x1DzHg5bE0so6uKA+qVZuYTKQNmQ4yJTvr4Qrvd1NW+bV9Zm+ITy1a5hLSmb0/y/Ed8QZ5wyC2i4uLVmN748N07BHiOuXpP/VCU4XjHmmY5fvegpXHGSCwvhZQOBu2ZQMY71iACyBItLbOCKO8/gO0YEzt0l0yscrVsDbgprKeOZr5/E2Amubvnsue/PVMaEjdgLZGrFi4ixbeDGQp2/S4BJkiJE3Q8223GzkuGKnA2HxI9k1d2t68cEP8aoxglRL50DqqOfS5MQTC/atTg1H6qL2gnVDVpCemxWH2Qz7JihmtXy8N+sIu/6056xhrAzW2VF3vYb/LFXdd6Wj056fvg2qhoR9iTJ2ojmf0QdhbImvWAsVyvJodKiUsBjHcH+CLoU4TPq+nV04OeoiOVespA0xELisCm4Wf0UuV2D26orcRxQOL382C6JTS451sEpj2YE2SV7ajgZ4OAbPrxSA4rHmggM6LFIFi8gGVOMJ4nmlS1JAGqNSZWgaZ86qtkha/k0VYiHVO7fkdvNmiAzsyaIVwCESunhSRqrE1wWFZ1Kx3wFrlm3CvDPZeof9fGMcSY+nvHz3IPrDsk3oYzfiNnt4YUe9cpwGwWRDaDC13mt0dsd4obtz+/0PBPH2k6CGilX0N5DhbW9l4l/mOG5Ho6JvzmrrgYgH6oviHox1V6j4XU6C20jRPwEYCjg0DfANNrS2Q9QPxyEDV9iD1NujBXBI670m8cOxvsxQWdACvcgvw90KMrwVlxQzk+TJDYmMqa3RfY/mbcVJmyznezV5RbjiyIAuu5dhUVUqaXqdsUq78Jr7sQrmQBOHRHIK9M/gb8DLV2VrZAKfeBlUIPVsJf0XE38hbwMDVH/8xVH9wbgMUMZ/gPmkjBchlV8y/IxpFyWZu/2ltxHIjUOOIGMwnpsqirLV2pU850eidSvKzv994rfBUrTDlfamlOEcUPw4R1CUYK7sRydKAxOLtcGo7anXf5y5qsGSv1or+4OaSLtULyDvlnaoRP2ahJV9xzpCowzeeOhQIPzHXmpiDeE1StBfzyEnNmxRMK50kNYY/bpJGVCpQILoaLSpiEvhZ3yJyhc340a4tWDZ75H6jRqnU4N1ZlTDsXg5/Tx1M6ZLEO+C6oLGOQK5Fc6g2oVdLzi+EttlLHl53VWy5PxlN4DCCmZ7xLdCEybuXkHOL0mK5eicWnVJ4y4jlQM3MX5dbZXEsjARU5qfs8V3LjWVcHdYP/B/+L9M/P6uw1XX6FalsF6lwke3RGIahRBtrn6Fro21UHsnVmD0ge20J+VNsx6JXgfg4kncORpYd/iK3sC/TTRw+IyjevPkhF1epgJKy4wSwsDUfdgVMgbHu8o4CiuSWq39eFNrvuScR8T/zOIB0E/kTeMp58JpVRvZtCmdcXbTEMM5RudgUntJaT5+WuQDZ/7mbFFYGTuUOHalR5EK3tvLoiNkVKdwyYsJYZFmvaQKMYFG9MGifZWZ/xlQMwJWXGYCJfycNKL8nHyZxGUo4IU/S1qt0lRT4TvFVP4S9IMZf3XbXKm6cshYyfG2yH2jRVTefLqHBd9/trOeOYcXbWP5N7lGoV6LZNUbHjhFfwSd7ZXVxt0P54Z5itJwejV9JMXNBoaaF8XFzUdC0pY2Ha9MbLvUVEgkCS/5ZMP8M4gXkQ73J0Lg5u3bU7zgckq5vIVNzqkS5RGSkJz46ONCV3meR3B+aekbVIgWZBiHQK0CUlXeo12ddRn9UA4z37IvYsQgcaiWtF8w7IBVfjrfddmdA8cphJR6wrVQESYpCRKrZGsI7i0ECZfDvRYUZ2P229fJ+RwslyykscQcr8etroMX1TthH0/Em9I0Hciot7BTBcERnjl19gYDJO5uWGF/Xe6YVbmF36KD21fptzaDyPC1GazgWizoajsgbIno+v9iSzS+Rr2L7JOxWM+0AgXA2tch98Q3PetJrSB2nXKdmovPeQatpTVY/pTSrQ0jAEwOOWB27c9UsF85/QEPaK8iZoawakWMKrcXXIw+UyHxq6Kd77B0EJ9Jo9KhjmoLnQst47IzGqkWqYXX2W/zC4wYjCPdXHPnkRbjQ8lMRHEtRAi2p57eBEm9r0nulPuMkRxDfVHlaEzABFT2IPCfIg5p6uIwxhfNv8/dG68nLU01c8BRlRehsLgRld/IGWChxJ6nnZMt5BvJ+uYDbe7vGxeOFpvYMdQBN44oPHDVpXdsdbD1MSAvwJNojsvdY/vq9Gj9aPEnro3znSh33K6oFvE68SGzjadu6u4vxJUzezq4zbI9fWlzeD2e55jYCLzuWeX5VGWH46qDMsCsMnLxib9NR4J91dYm53o6l/07Su1/bsTAXXpN9i/3ABEoXqPdQHx50+Zkk7ewCZfzt7yd4hOl+YwW2hEqKZ4R4pP+kvZCgIdjN1WfH8Z4vBvWBkRE3lgh3u1DN5cIfcHa2XGfl8ri/rjDEaDJndLF299s2I4KlCALgMv4jpBainexLeowNBOkXuhqGmDkW0/X/b1MrpCXupdzHdI0RZ0p6uvPwIQbr3pXf/eW3IHannV/4+6r54lJy8t9mwPNcT+P/WpiebTtT6lZcAKkMAta+AnRf2tEaPYDPCS5zfbXEkG92ZT8Y1CXuAIar2UTYuhgEkAaGW9kFp3VVfvXovoTCbbtRF/zYIYoBvmdLp1DiWOPNgu97PJeSHgE0wXgqScoms/Twxf488w+gtJGHWJguL9fIciD4efimxeLm7iPjLpoN0kcaM8otPb0E8N9B4Td47u7ytu0fSbMS15Lbp0fn4W9PcnQXUdTR29CN6Y5+q6OnfzwQvvEeLv/F+sb/6D6hzEnx8j7BSYDhFnK8tOmq50e7tyMslix+ZJhtcc4S6zqNHKuqtShT/IE7/2CfCFUcx0JlhMRPPX4d56HEwxAuBt25daq+U6n+x4GLef+IfnxW7gzCqFTqm3a3kkwnlxcE4Hnp1kQU1Wgbon5AfpVO2mN33Fmo8Q3Hz8cmCD+Ofa7Gu+mZSnHSFo4cVEsn5s2hElueyAvX7L01uc9LAkRbOBKrb+beuK2e8No+TFlZs4Vgst+5eXv03EE5Qtx2O6e0z/sF+ClwjFt6YbPCxkmJMQopnWmuMs80QGLMe9FBq6fTyU3Vh40/G9aO5qbIaX2+SVrVruiU34xtKVHe2jahrb7KCYu/hfXgnGrbTmBB7s0cMC+WnB82D6RhvA75qJBhPf6uV8lfxjB49WUck6qcx6L8gJM5NfCGO6JF3cYyMorAnm8I+kxWFkaeRPIzY3XnAuuYbiCWbQlTK1dQganOhGJnKrI3gIaa4dXBGnSXRlTWx83JaFB9oxrCmJLo=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.