Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx56bacd9d-f468-0a47-5201-d782db3cd818" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx56bacd9d-f468-0a47-5201-d782db3cd818"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qpWM22hyO6KVKJ3QFerfVOt2r2Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Prl/jN13S8xC6exUNb4cYbAN5TWVTqGrwzXP66ACiSseHo5Jk8VI+DCAjleEbr9uvqMgTqBAa9p4B8B3GHYRYQX2vqmD0VJo8TaUC7GtXAWBngymCcSWHvrE/K2rB5lfnlo5271lceaPNpBD0cxNkZTVywYcEOmqJXaF+wzM0yM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf0b8296f-f2bc-d365-287e-a886c2741972" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf0b8296f-f2bc-d365-287e-a886c2741972"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>XEUVNPDxK02gLr2tLpb4OffmALc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JJS7wwD/uZ9dxt7W8ZXTmCeRvFG9J2l9LfDy6B3L5g5PTzidr15v9iulXxEBugT9+OOLVVPVhRbpVKUdl2dQpzgXjd5Dn98umleYl4l+AtUNl0RgzbJ0h0eqeroerVx/ZSB/gAvwLPPQiY/DOPh0WBQtW/QZB8thE/5omqS7dp4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx23f587a7-e15b-b050-b5ba-a455a4922707" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx23f587a7-e15b-b050-b5ba-a455a4922707"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>yXwqeFEnJ0JYPRlGxBiEm154XsU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ZR5e4eNhqsc4skd2yHNu5y2Wao4lvML3YfxKZO+emCwqIEnR8oVyTrWpMaz4z+ye4eeZEh9V7jS/YFjN9MhBd9DyIM4mwFYwW710ezDR4aJBwTm2/UaR2BYpDu3B9s1EWbHHZfcEuictstuMKs4R+db2qMaLZIaG0QG2FgASSl4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxb9d31c6e-c670-017e-a4be-32edde056627" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb9d31c6e-c670-017e-a4be-32edde056627"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>mHoN0RYmYnHR/Yp8nV9JE45SIvU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>UfZXl6kTwbdr+Jm0Te25ZhxD833dZvVxsRurseEbDIE5LcIpgmi6TWng/gPhzBz1GFhX4mJFEVEztG0Vl7dIKneJQvN50bWGJr/b5OwATyjQxCtngLv/AlXmwPeLw/ANGxQjV/aIbPQR9AsaJcKXFEi61jxMncxT3NA44CbQz7w=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>pJUT0Ln1WWxYksqZUuiNhwfYkcI99PTHDQms+QyfGbnnFgO1nsZdwxFFsbiiBmDlJGdDs7f3c3ZR6bwiyOiS0gl7KUXN4dHvxt7HZGJ5b7ez7fTciogi1X6BQC9gDAkmVau84S+qMcdegWGH1hXsdHf/OCYme9Zsbz+fTmrJrno=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ZLVkfyAVzaLiOoJztwiaefeRCmooytz1h6usmsELk5pOGHSQPUJINo7xxzjtv1PCDqhYgXh3otPHQKPfzlry95G8tnHRVslQExjdHVYxh6/qb4W66SqC1CJqccQdFjY/SB9SHV7d6Be4VuehTAhSjtsEIBOURJglLz94qkPTqY4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>UA6+xX8Lc1QTbgX1pwZij42QIeobubgE5/6X1PUPHjVC8q7EHBUt8ESqBwsNexOofp8nzrz096aIa3JqW3RumbQMGLiwWxvfcfrQIbbA+SY8WAuGUQ0K7k+Xsw0k3ou/AL7NWOJrvF0uR9uMRq2ibl+ys4olVWt/g3EmO4ODKZF+c9+MJtpHdRZ9+3w/Y0KM2fFx7v9AHSo3PRHda3r1xl7z2gkjBl9rTU6iDYecRRNYAgLrRUaDsU+o97F4STKT8Mnh5pvQ1M0pBTGJEILME4TVLZufqCEgBef9Zellyk5uYRFdRv0YdM/+gplsAmS7Wj0NB3y5lXbVEVORuTJXkhbuQjNqt/9fyKD4CZ36n6q6M6pspLBIxqjBD6C3Sf9+VlTQrzkQVYcuiDamMUQtL7tW/aZyq+EHLCLTOLRY3opgU+Wen0RlBoQf3diZmVFVt+nWnRfTGfkxo21gjNCsOT+6rL7Ruj8oSFC+Q1FoQx1F16emvhPm2H9cmWSs0gp30Y1boKKggoV23MguQ+mYhufUSJ+gxW8nffXSrogYfCNhGxNTBoZq7Sg7GzGvlzEHUjCPwcgZosXxkWVKmeX/xsIoIOGkT9+Myk2EyKlKawAI7cua4P9O7kG4O/WvEDA6DaPCoE2AnVsyLEjUXAg58KesruCeDkMacvqeiboHt5ip6lmvFsz0zGcj8Fi1kxwcvJoMmfVIqGU2VoVqBHvNZxSVl0xs3Zp9sX3opNDUY4YZxUKIT3hewq9bYhuLOcfRyotjgC5HHzljiGvalc8DROvg2t6f9qJCxc5wKxINBzYiOfs1VBPfN2GigUkjkVt+XadCT7cxzBJsvo++FzpKy+s8E2pCswvHei+rSEfnqehx/OyT/Y0Gv/Kh5ZYYl0YHjRtKV9JYgaIghg5/CIWNYbFsJm18APCqK4kMfWasoQTimif8N9Hguxr5Z5EObH3GY71tniBasXCCtDbxzkIa6KLDqpyy2IKI6z2vbSOXK2YODxhH9MeUvTejLCU93wWjRq/R5iXf8lA4frkZCci8/WIntRo2vrEqXDMd6pdb1Yr9WuVQTJgvcAOmSAd4OgTbGjr2YJnjeyuDLmGxNIyVoD6PSd5ZCkP9+G55mEUkRphwkPY0sbkxKCqDd+G9ULRywhxtuyAI371wXRK0366X8+EQ4KBZtuB0N0SFls5ILR+9174R3ZbQLc5NcXEp9Uo/H9ifacMcBwGNSDE+iZdLB3S2xTdcZMoJnoiY1oU5EHwT6JYL9W2pEbslq3lcOmfCUyqK8kvC+2g/K+99SJc1K9xa2zub9HrcerDQHD11cp2TLSD7HwuPbqWduDHFHhFbgkiJOBLPU4BL1iY8rHd7TdTYmuSyUDsjg64qEuRn/8vV3uPeoMYhF1IeN1F2fjIf3BFSL0sRcJESfBm+81xP6Fgzk3v7ofYh8Gow5j+wOJP0m++g3ij/4nK7eoKuD9p/fSzrQAuocwmops2V4vleECNBcSg38RIDiLWi/lB7Nbyk11r97Th/YQDK7G5t9/DzHB8GT+pMavKSW/enUGHApPpW/+anlq1N1MWOw8HO+NbgvlL2OmLyW5vwCEBBX5i5DBrXOgyO+qjx1UvIM+XAQ1ujFkp+gvJeJqHMS8yQmvJsvG7SwqHZrr/OHag1QX67Lc8sHAmCAgXlS8t9WZfq84epq9S4UPDk/uUNrzitGJjufOlroB9JVZ2Jy4tAiWyAjPow+4FUw4R6SLPGW2IZIOScpculSOPN2ObjQKYgJ2lUB2/vaVMYnwJqC8C//ker3BiyiRHZQa280L3pL5jBaMTVqBWRdYCXa/N/4xKYaeKviZyVOwwV7RlXAaTZ9VPHE1NM42EudAZwRGXLTCjFwg/n4RhFbCmAIIeiOg4GCOdYUKN2DfnN06wHwamMYXUN2EXLdeLrsNihOdpFlMQfiUz37sk7XdTpF8rwSWDcvdtQYY6iJ5bs7EJ93iGJ0wJgBMFe8xnoRy7F35lLzXI8mHnD5nGQYmNsLBsWShQR4yz/NEalZVeZ9J/+/EY+tvVtSn9bB6gT3yUZGCf99L4HGjR7A95/xVTzdeo/PK4OgAppHZ+ls0jMUVDz4+8K1Uw5O/45xHaYlesoxgD/19bBHyTWShE89LZiZ+GtGjQz8Hht3hCdcVtKF77tPDY/MyBgTjRnrjr+tKI599z7hEr8bkKrSmCmAA/2oAKdKmMji5YTW2Yie3Eh/sdVFTwf9a1E+7W9g8pE7w5f3m6CbhQ7yf5CgfdTi0HS8zA4PDHH18AhhOD6fTHthPx8SL0Sf9YQdL9sag0+ilXQAhQoXNr10KwoAh5ghn9XBdTjZBATwQ0lclrSKfEbIapNCJRUGKV2etGmRM3tcw8f8Fr77najvCdM+dwfJgSh+a6QXFRHqyrY8XGGi/MVFW/Kbbas9VNofplqJK74m3V5NWPOMn1wxSewhrlIZkjHXENJ6BZ3qX5yA6vPIDcJP/CoVCQ/TnkRBfPrUFJcgr/zVmvexbRhgDl2GJvGG6jsDKVZDRWYV6N6cBYsG6mKXBhesgXoa5aAUdzUJ0ulOG5y+Soc6WLamXN4OPaXbe/57CWtcE0+DqdkfXGMw0gdz3ZQzngCzNrheqWYamx8JesGW1L5UcXje/pUQeANx1ntsHbup8SSNxNZTuEFruCn6tUS1O9BY7Whpx7y3zaxQMJPulJYiNk6zVguKn6vj7iD2vTGmk76nNjyHCChZ7jErQORLXioe1wRz46X98L5Up1nffz+OPoiJwbjhLflFSKuqwdAls4r7usGre9fSJqzEPy+DiSUAV0MZjTaRLh1ecPofnCEVDK8lhR30UEe7inMQ2WXK7Cx3gc8sjc2fTaTibabRI49wIjY5a8xE6aGF/zH2kUZnFTBveLD2HZ2/3plsZHuhrOd3OSq1sgILLcSk7UlvIkALIRA5kF3UnGF7XHqh2aUGELPzxit/oPoSnPnIuvy2B+j4bVeC+KwhHovklS/+AZwyWlKauiHq5or1spUJ7v21bXj/TTDNe+iqbvAoIfi81SE+nYYI2z9Rs3I77zh+JID9pocsMeOO/9SG9Qu1b6HvxFqcipjsjjOf8BkkPloT8NB8KmzQthFijZjHsEnB80yToYSEfS/OanvbhYLHlqa6XP6ZPNnCI4iWdlUmXam0cbtsyV1UsRHsc3ItR8tkp9kS5ulJ6mBjYXUpO1tFRZVPwZsXgsTdEurV0umT5pIgyDTwdM20XDSjIy087t264pWtPqvv+JfEBeZgaz3wnpCpLt7gAsGyiMhwi+WehfHhNKDGivo1xHmZn4asqjVOXhEvBdZV1Yi7BA6LY9dgvRxtdksflitR1GR/yPQ470nVkqG6E2bNZuCiDYX7qIq9D+zmuun4cLzlLTXHAIr6sCa9J9kajwmigpJJ8Ye60B0MnlaCNtxkFGPx0yIyoSnF1E4mFLaw7aVWCcVjSBnKWDEIRSIDEjwMbEjKtHFbGmetMHGvqRCcEGUIlUztM5eqa85cfEtRI2EUvbVyBNllj0P3M05QCTwIUkDn9rImzlKdUbWo4QuInWqSWnsV7QuuCm1BfpCFH1ZWysNSN4Ggqb1Vahe9XwS6o80/bQNFZD18CpoZUR/5yjZPkCGYIGbNJj4RQqUaZqIgiRpN7biy9r6Ou0ynBTwidkgHsBBLrgz9RMfTZkvlRNr+kxSIOy6KKWXvKb2LaSllX1ldpaIqENEEkSdwWGR2Fd92MPFBNK3y5dP30CfRQ1J1AVV/hci5TsLAf2OX8yP/6b8FXlWgqmpKJcJs9/QnCBlRF/ziLKM25CzY/FjN0Xl3Vmqm3RKDMtZEoxeWYrtw5CV+6At3MA/bNBSM68tieonvVCK5aaVfQ1qH9/WfNyNnjovvGvjK8QiSbrA2NR2G9ujG1ZS+xD8m7K6JpIEdh1ZEK+IwSilII+XEet9KLuNQfz5HRt4WXNXdDiZnrqPZOi5lQLRDbXldsDZQY9YIzf3JEOW6DjGqGSL5ihng+pVpAfN/PdIIMIaJzforZb3mrE4whnse5XxB+L806F6k60b1fMB/rCga53W0fWHpECAn9/gVYgvCentDDVSxCl/WyQfCW9FrKcLfwkxgaNAUWKv7Dp/g5FVFOjnnMf07bsQDz40W56MxgWxzWRjOwc/Dy8DzP6VGmhe+5skG6zO1Tv5Lv2pirvbYhHiPTc1Ri+cv6T7ZovdasyqbvKLUie5t7+pnJg5litg7PTkitJCx7v4PCxOB+gBUnG2ZLrLrA5YAyHefDk8wqHlaRe5BGBRTdsnv1oRb0NreUEcqHvxG2EKDcGr98UIV6hGxxv0yLdlMw4tAhyD8VL5SwJbaDSpxatxfPjy1AZIAmv53TpBMPQhMUMAH0fKB/iRgX1SKrd7gyx5uDk91yxi0/mIJJ+V8pLnVxTsvoBgDJQxeAsM37ptav2tmJOc5DLUtHL0H0M+CqWgzeEzS3bOfP3KmYNx/kCCfbfhRO6N1ZtWGoQt1VQwVlWN6iYueytVaKSljA/wWWrL3eajPP+1tlRsnW1joBvpWh5lU/+P2h1UU4uMXMCWBly8vIY71cZYFZgYBhGrGmxpArqyrjQXZ/C6g/4LvT8BcarbLBZxymLCQsRgG8wuDN6Wd2jJsa/Ql2kvTE+XNQNe13Qii/qJDO4eqB5AFuF/bVOPRDvjH1nzTTOpK8Vhl8VsURj+//CDhAI0W0fVXHM3qF5gSdtjZpFlU/QKFXyOG636g91ST8xq3bcPoSEQzytuddd7fnltsAFsjiLL5FFjb/1hpJMdxnPE2fVBoQ/C+0LBnrTfn7sg5SrAU5K1saV5HMG+er8C0qUJ2wJlojhPqCn473CZ675+LeujaXsSZVKSKfeFxTpv/3DDerfi5RUznXoj6SkRTO3x4nD/X7xVUk03xQnF4zeJ66xaIZ7fgCI6V4FRhS/uWLGABka7f7rc+Vy0B2ELeeCTfJlOncebZxpabloHb93ao7zD+1PcAG85Mp4e0Kw4jeOJtTtA1BrM9knXKIAoRWj2T+eYcmU/yqxC2uRam7Hp+OsejntdMvvzDO4cv3G6LB49udOZAG+ASZIreFwIlJuN8aoS7bK7Nq+0DQz3I5yzOsdkvXNpZuu1CZeVjIlt+GYexhQnFTI4mUoSh+/n73dNviHWrPR8bc7+Mquan3Sc4yPb3SfVTl3J358PPXIEkSFgJuz2K6i1E7mTn7O8+NYP4UHV3TZBsVxDLxEPDfgdpowZHUlyy7ed3GztITPmObYbLgOHjrQa6jnV/gRcwOZ5im7MPabtCJPzfQaGroAsk5CfIgYaNuvi28DTSD8e6SY9A4IYtWUQkKTzK+wA2w5EcxM6V7Z/UPIhJp1VIGRe4tCN7tZDEePvgZqihmISWFOfV2EV0Ww+4eIfYDgUshBC9odYbcrpZcOoW7qoYyaHQCfqMAUfx7/+qtDlCFPK3MKXgNYhSAjbhSaUKqA+Vww=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxdd784073-26a0-a1a9-a707-a451a0a10053" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdd784073-26a0-a1a9-a707-a451a0a10053"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>xgH/j0lGVn99wdmfdYvG9K8BI2U=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>fvQ6zQB5q8p/5BiLqMSJHcF4GZich3HB5TisCuZOSWubiXxM+5svNACBcLVcGfNykRX7PWhV5ycxSjvDUIJR5Y/R7j9IrIj8TF++mZL+X2m1vSEXAsFXB5fNuNUqTee/OPSUCCMGiNt1+PUs6gaIjpsh0hL61ril2WfbWtNyeVA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>pJUT0Ln1WWxYksqZUuiNhwfYkcI99PTHDQms+QyfGbnnFgO1nsZdwxFFsbiiBmDlJGdDs7f3c3ZR6bwiyOiS0gl7KUXN4dHvxt7HZGJ5b7ez7fTciogi1X6BQC9gDAkmVau84S+qMcdegWGH1hXsdHf/OCYme9Zsbz+fTmrJrno=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>k2F9owQw75s5yVwoOCcDiYxXT/AUzpvX6XBchqLAcyBZ3i2mOfZ14FBG5Kk1JE13acXzg+wDxrmUqaYNu7iHqZhBAt4XrtmWw1Pf+/imd0YJ7fRcXOTboXSyr7wek8TqbW5KvWkDqYEBneNkHPevRmS5RV53jtiBFzF4Mtlvpyb7/Yx2zzpVMywJeCkH1axZtLAuYEZI/wOP8ctcai9B7g9yNZr21j5pyxk5mMkhwCiyJfhFEs17B8EXgFB8UTchQemIXdBXsBrGCLdVZHKtLcE42+pZbcJu71Zx1IImwZnJ1XmcMK3XYuSAzETEDVSlk5JjL1cn6X+DvUIoLKGMOU6K3HWBvcTjct8+PVnZpI/CUmfYMueL6IZTI3M0f4Lx77ZeU0D9f7ceVf2YhuBYIHAnuiIcjwKXLHUNxpzchIc5DcYcgDuLQBoJbh/PZOK5zUlF3nbxpWjP1kUKXOe7Drc2iqaNs57c5b4/SruUStuQpThpRSBS+WuyMZWKMbEUgj+k51+Fbs+wCjCEIvaqm5kpTgHm9oo8OEdORHo2qyasbLu9mQhCD1DkoRiq7Min4C7sFFQ2FyNR1cAy1uiUslpiVVFjfQn2kNTE612z6VBMZChxFPXwMW941cw0f9BOV70IpYWH/Qd6VLuHnWZ8FiWUcBwakkstKSwVML5aG3mNP1JhRMx7PyLKPb6JztG+sGzIjTlvbe9Htyzvm8TQYjIdyPdryuwUbrjCPrUhmCLoI4OLClaloPK/qYMV5G3Z+lzSMZ9/mBqRo33IIUH3iIC+A46vs+lBb2RAbDiyVVmz2uTRchpvSvbGWJSlpQLnXsiz3cUS81P6JqFvzyPL2d/6FKOnt4FSjcc94N5pCjWk/pPcF7XMc/gxIblH4sOSjQhSS1CUg4GyWuNh2NzNsP29IL98czHHL+jYnX5jXWgdDvuI78IoEPunc/96dGwqXK2B2c/xGw/4RUbBb27e0otoMsDJaHpgxWGxgDanHcsDQtY0Vgk93AxhT5dcv++5AlixvPxEurFGUCLz027dzxu9sChVJ1xLppdhPfzGAR6GfmESKb2kAqkxHBJtQOjtzoz33dgmgiGpxR1LEI8tJi7FpZA6EQjavSvzpa//H15AqTcQGjBLoStJkDh6KZpiJV2qATUGXrzbz7UB8FaLhM+4um7nYDN8SV4ZLo7UExzi6vfcVsU8sbkWaZtg2UH3WLXFGIwPUEsh8uMcM4wJc7AqISkdWm/YFaFmsiTG0mWC8Hp3XOeI/UIx1GFtsCX+NWLu3MePqLINAQzuXyJJiCdnmILd6S79KMZ/rmwCCx8UWQaKB8GRumwFVUZwzYyHb20yl/1ghu/gbXA9y3LBtZR0w6zAFvq2Hgd5KehQbrV1vl1h4VphgNJIYjEtZD+lvSXrL/RsSimyhdZjcB9fuySXlD5AANWaPH9suMdcgbuqCjmlJtHMLWAIeA3HjbMBqowoUFYNM+xIPRFIWEmmc+7oE/it8AGsvPH1wMNiG6qH8BvVHUSWI7zYgsmjHcc9o5eObFIw5MmsytJD+eQe/uPG8lfaYSABImOFU31Qlj5pSrLWaI5X0PRXhA+PLp4/bM/3jW503/5skquIiv3Edoqy+EXEoIoiOf+f6a0O2nasig5lwsJ6swT5Y97LUc8VIjY8qyrZ2ZUDI8C2liqIvcv0TA5FppaoVFW0loDCu5c7uOletmcGjd28flrGrEn+oSLcY5T1Ylh7zaAmjlgrL+5P9fMk+2p4ZDNB2QkYex1ohI0iU6aWAi4qnsqYrjX4HGTnwOxY77f+wvNGzFCK3XOFUTgqGDSuITPyIx0GKKE1IVtB2VOma9GpjYauVQsae0okJttLhMvVYOJxW8TdMorLqsuEwBwCCULb+nUv5y1SXsuhtuCE7+bS4i0nPbZuGZLUGGwRekgWWlOYo5xkhmAEVNSUea5qVw/bJ7bsbu5Xxf1Qd9tkvpeLpm21KvzUWYNNpZGpp0kwovymGfk+iJcwp2RVlKg8UptJ0al51g+fst4MVh5OHkcX6KPUIQMN6Gtdctqqq8dq3glt4Fe4+usBieYGwT23JciWBzTN+OquVa+VpiETGkGu7d9+o0Bz9Jo6ZGy8GJxnVl8NklxnqHyK+5z6AImPsYxP8zItQSIHHPEPhD/Ce0bb9uWfZjUI9eFTUmRjBgmbVKC5XozXpaDL+p0m5IVDWkTSuPOz8muhEb+zODuInypO2ik6MrIiVUxOhzx8cPL+GJu048kJzHrP1qZ2Rr+WgnbLHBegAewdswp+a267eEqrNwFsTBAlhPN2ZwAM3frMIGLMUBmQ9GlpCKTCHxntUVGPtlrdfJY/dlMnzCsIyemA+3cjrCGviUr5u0lW+FK0IK00Y9tvJ2TXxaWWDMPpmrzr7r4VC4Hq9XqrqDLyh5QNMFtRvkjJgH4gyafzC7avjxf7PNJ8Wc9RjuaWmyYVrW27GEkgSYaslimlQDeYaX/Ztu87HTViql/OdIzWLcgTNEpu7HoclMKzj55X6G/Y9Uk57Xu/q34NZTt9Xru8psky6kyVSSqjr2rjsYcqJS09KYOhXmbdW1zibTtITDQ8vEcCE6/dXSg/wmqUbIHJiJjytysmkf7aV+ecFRHnVa50Pex+ob04lCCbz9r5aoTeOBEQ2zIwhtk12cRX9tgHsA3s9O8xoc7aDH1ls2aolLwByuqxzOE9f7p9LuDjLAyBkXcv078Kb+BY735W2GPnL55r1NqO43sGjKL+ImPsWWpNNv539CRmgnKlY5LLbYwFxl6Qrbv96PeoJTiLcBGk08eGhEILLYu+tEtlkSx7/VYTdXggrkPMtPyY4Ctr56fWkTQLlH3lHaWPhRcyfNc5y1cF/NUYBKayaH9mpkAjs/5rcTnSDWOVn+HCgbLaff9xbSB3w/qAOvE=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2261d7fd-4539-1c5f-3aec-ff71a083d7ce" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2261d7fd-4539-1c5f-3aec-ff71a083d7ce"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>59jC6EQf1sxWfFWt0q7Ywqxbqhc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Q53L9qpqSxMC23PwV595dob4SbXCV7VFpt370kEFsDd+GK+MXmIE9O5LdXHGyQv9/gw6N/iTmojnFmGuLO85/d8GM6f1UJ6K4zxdlJILBL4sJ2BH33+2mERYl7btRBAq2QdBvNJAJ3HMcJxSWG25FqpjiM8ltfcAwzGr7CuOsN8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ZLVkfyAVzaLiOoJztwiaefeRCmooytz1h6usmsELk5pOGHSQPUJINo7xxzjtv1PCDqhYgXh3otPHQKPfzlry95G8tnHRVslQExjdHVYxh6/qb4W66SqC1CJqccQdFjY/SB9SHV7d6Be4VuehTAhSjtsEIBOURJglLz94qkPTqY4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.