Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx58d09cc1-e000-d17f-1889-651e349b4b3e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx58d09cc1-e000-d17f-1889-651e349b4b3e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>jh7BgLzO+VQJRMZShR/mEaXwR54=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ECj1yxmFato37Lb6+k19cR2XW/JUfPsmNwWzappVQB/cX7RMD5vA/R3sm+9mpekkrBAJLvIycPgs4xHTuk2DnJeSyoVMsaNdOKcq1Rdfj3mTDVMJdleqqjlBXdnwBUGv+qMXlBYhzSJ6zr49Ly8JzJuWqaw8Tv9gQpK+ljefpXQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxcc98d542-bc42-f47f-8fe6-6eba3d41ce95" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxcc98d542-bc42-f47f-8fe6-6eba3d41ce95"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>PNtdF8FGIpt7uEEM9yDvF78K8I4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>fd673ZbNV2e1Zj8kKFkVdw3JDgdN7957ihMsRRIOA7B2NNaT8AOF4xHhS4G0J+WFtIfStcKnsb6Pmc5/i5Tu//A3vKhv9u9G3gK5uHtVkR9U52YxvHOiu5IJT4z6AVUwxWJABztuCO2rYOewykana5mMp3IE3xD3zFY5RkUlons=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd3e52dc1-676e-873e-ce0e-d95c9cad577c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd3e52dc1-676e-873e-ce0e-d95c9cad577c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>XuZDePHV8aY/SswLEIpEsB3Zueg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kB0zHE/BlkdMOZ+vgqUG0mUS3Xz+TqmZRmtFbJf618rsOn04fu8Jtp8rq39AfXXigm1cDyVIiFmLUDi3UKkmeTFAOa25CICiUhqdk8FA3fNk+8knJX6GzPmBpWdXSQDf9TF8zatxupwH8P/B5e/A8SXOt+D4gRTOp4BC0qtC5DU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx79b3977f-a87e-8d9c-5b64-9c4d25a93320" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx79b3977f-a87e-8d9c-5b64-9c4d25a93320"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>mYG4lqfDy7gaPuL1nEij7bf8nVg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>lGoKsHvFBbFy03qk3DemtAntEvIQ38AOhyXXhEUsAmJuRSedg9dZjbUGv6zwAoNtRg5A+nT4J9D1kXodvkhZspp+Cbpdednl5GWNIGOxtscc1sp9aceOQ2UXwYH2xWtrQ6S0X3XVP4PSJO/ovoUSIh4Qk4HR+hdXPDf434hJA6Y=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KJz1IMd8X9mgXdn/gyniy1qWHolmH4q/EYAdfBuJ3Iyl5o4Y382EXAXal3CzNiw3gNm/EFlJUNuchQqVhIKjZ3O4Zz7rK8fDZlWBh/7ftArDd+M9NsNzDMVBpC2np2iA/kyNHeFiEZc8/7It/VqMe1pR1DuLFBlQeza6VWdmSYo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FQwwJYE52xUihSUaRF2ethy84qhjpep2k4uc008CgTco559HNVKIxHyBn2XLBUVPJlrq/99IbxQa7V5ZVjk6X8Z8dS3rLPCVm/mtpKwSSzqgTe5wFbSUuoPs3ol3GKOJZ/XUnAZNgZTEV2na1sd6BtkeTzjp8XSeKYxR1qbd25o=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx06a9a13a-3d18-107f-6bdd-88fef89b74da" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx06a9a13a-3d18-107f-6bdd-88fef89b74da"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0OFeCH5k6k9eHU0IbLC2n/wzxrY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>hYVtkvjhalNv4BNhywQdd2B8mqfRV3/jFYi1bxLv0e3dUFsZPY3OJ7xvYKandqOY3bWTkwD1ahsiM3Kyu7Ham09p58oMnT6fzsBtkqZR377t+3RpbdRUTjLZY6N5c2Ux/5GJVv1+Hj81CunUy+ewHPDm1RTGsqpVjzOGtNiusSk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KJz1IMd8X9mgXdn/gyniy1qWHolmH4q/EYAdfBuJ3Iyl5o4Y382EXAXal3CzNiw3gNm/EFlJUNuchQqVhIKjZ3O4Zz7rK8fDZlWBh/7ftArDd+M9NsNzDMVBpC2np2iA/kyNHeFiEZc8/7It/VqMe1pR1DuLFBlQeza6VWdmSYo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>8mrcaEcwOgasTJvf9Kamnjsm2BBoH3qvvTu1pgcARDEl+5E9BJe9k+JLhkis7K7Lg72rQh897kBXWWECrf1mNkvunuOd+AaZPIjnEyr1iBXRapG3o09V/xEa5PdhwR3i2KxUFzHbDIA+LdxrKSXNZf7ELeUEZ/cTc4yFaHdj0L+xTJHTN1SSdI31kmPW29juoftxkRiTMhaz0tJYU5jdXtOXObookgsPe/cPtBqAHsXYA1vsamWqe+FgJ6Eme3gtMGIQdNEysI03wwcma7Mdh0VdONSHHthwShesn719ebbcs+8wZg2sPvrGWgwk5GCZsZ40F6MgCPIbo/Gk70UXbDjzrf8GQ49sJZoDnq4xDG+ynJyasqw1jmsnJ05fVvrQg1liVfgUYmN+zVty1PB8DSXCnbi+4YkfteAzaKJqkjZxfzVnkfKYINJeLavkeZ+AmGazJk9jFFpbmUEs7/kXXJO7UJ2Nn6FW/t2MGA+U2sDFAiTO2hmOH9bYOpCgFJwewM12iYJA1O5QfK11uwgz+iqoi32nvpxK6JHSotdUQMJnR+kqCckd4XZbz0fzq6GbKrrRRzY4Yuqkh3TlGGPfSZvvR3x05FzqD9J14cKlA63yadJw30Z1Z4F+OhDvpdJnkT/RcBAB7zEot8Lr6T91L6LAM07EMnkgPnI0G9l4D6rpo9vncOkwx8f5RHFZwGVHav4bnkWmyGm9DAKfT1go50fZtDYPdx4G/Kp4TMlaeUNfSCEp4tNE0cCTEQfhbMMrtqVGej+wVWux1nJvSWhEwrzImXnITEdZquWWXvMAfoT+dQtc3gMK5X6WuhcjkfARNmXUxR9pT5L4B16jGf8Zdtj4AVQnR3xbosxZ7wfgVTuughlu2RgFxt8G4DD7RMZ+BYjTtKFUlKloVvICOEWMxIpUcO4DJ4QmdwXylkTKdNtDGQuu+ceoUptFQSkz+kIQlZMMORTpYOCIUjk1W+zPxbuJxcOv+68KSPBaGuZzaTSOR2N8ZrIKIazlu137NBdlx64bRsgHQnz9t7EEf+akz3dmvH/COWONd6mpqzF2vYIl2lfzJhKVcnq7Apg08a4gDh5SthwH8QJ3EJqHk5irCspPTaIQOVYs7UvB86oXjhrDq5wlkw53u0rzwSdpZS8uvN3AVvTjOzZO2Sz+SJDXzuVI/idmrfEUt/d9eZHQUf5JR2QnhnnC/iijBeFiYWBq8IdN32ea+/802Ag1raD3/HjmCc/x5dIV/aZNWklkS2sYPZagHwPLYk5NpxH/aI1j0vVfELTS6ev97M42hgQUgwZsMqaOnI6u7O2yYA3pWLVPUoCkkbya8DgMITq98ivbXhTl3wJ48K9eJ1TKtelICGRFgmIB/z3lrZ0k+Xs9I6gBl0rt5GtXfNQACdAvaItub8ENL8MyFF+Ru/cAWYkW+uieSc/qyZR52pOsJdpV5+RGjYu1XBvY4X+3UDZFOfrfreUJjO49D5S7n5ooQfXbZOF2J3nX69X/kJ7J0cYjMvc2pFEqA+Fn0rD2qA187nbvKe7RMHqHmaOfDvZ8Hr6oISlw0TY6jHq7bJyGwc9Td9cDGekYVNd+TrbLB8gXDJ7sUr4CJhtv/PTVqaDcBM4CXWmDInxEx43z4+S34B48+6HVjDTf8kYxYAc5gENsmGnm+tf1pGOHPp9CCSISxt09/07Alde2Ka2FSOMA35BUOXALuNywl6ZV0rcvfj/gaGKWvjDOOK0t6aNWl3EoxezCYb6lfpdn48+eRDnhtAXZqyGraXgBYUY+dd3hBrBUsbeeiiJIqhNmLj4MLyfTJtjmDoHHPS+4yQeEXyH+RlVabta2IFsQqSCbBewFJaQtAjRaLIkMRUoYA+VeoKMma0idEQcChOFBARCVGd9FVX1Hc83XPW4JD0luBMAck6gaJPzL68/R8FZxCLF/pe+YldPK74zwtKFE7c63cux8SbnRQfae1TWzoDJ9dHtNMi9sX1LAeMonxLQSqzmCD74gK+sPF3za/lSmoTtWkvBykMjmn+0fScmmFvwlW/tjPYzuZpOxifJc5V2MRY8j8HlNBW59dW4cfS4FWJzHB3KiI/J9Jagr3FZi3GVWcq56Dyjr86ME+vKu+5I8fSSVnAlB6gCrPUtz1w+1/camz2HP3XdBYtNgCYPgSnEu+1aDKWBiST5xzejjlPZNzGJAEjZzG5eBm5ApH6muA4D5tBfg2tQnmHvXx1XLMD/xJzw2Qg93CiLMncBfttQPo4AV8Xo1JQr8VYlRWmz6nx0pXeyawi3xha0nmOjd0GA22yq3qEXiNXNAzALXK1WDgnpBAJN4m5Lx8+6BgBfn+yQ4dWn8znroECZZG2G0JP5xCZcKj+qKmbsMlE9ObWXd7nQZsHoEtfffZrtRCLySAnEX1OyY4AUbokFokqatB1A0YHQmyxesPShgpHp2+aLxtX8dBcSsyXOd/5Umxz8i5Rs6uLYEn3nMLPqtoVO9yLgmxpq/aQ1IRNSzjGZd3bGqah4h/Vx8giUhdaoA425JUb7O0BUopI4gX2CdYXpHlZGsJERLQMp8gGcHXmZ/LtdoInMTHgtruKb1HxRRwySxrLFrEFij43193G5VGdBRbmZOhwgvKWfAV7SjYbIMD1setCyInOzEYILVbuqo5wT59pqNwHxJ8Ixervx1cOEH50M7Qd7BwpVSXWjJVHKdbctWX9rJT18g+tvijZiPCgkAG/WvU7k6HE+JkDHVVUmXsNg2JiSSZ7KpjvkGSjUOxf/0RPSmAYRzepiaW+cjSIWJVyMViw2wN7/typ4/Kc7IeEA/53Jnaw6KVwUcI/Q6gCJmvsW5qqKZ/9a9mbTQLYxTYrJ3m4DD4bPCbMcaOtn6w/Gbt9XcaHOJx9Yev2S7msWe++VqU2gJA883xodOdzMa5oOhXCAOnSvyJ9g=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1251192c-7f7e-d7f4-47a6-75028462f214" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1251192c-7f7e-d7f4-47a6-75028462f214"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>pKbs62S7XWkZm7Jxs2eD13PUrHw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>np7tAOB3BUiRu/xwYPnIZBVUuWPdFSKgzexKiehPQKcGauDHYlWmc22dtU8hPlqA83hoz2LKVTWpxKzjKHIaTkNYhNqvB/sKYcJGjxOSoIjufUonJ40KMvBtbZeh1adcdrVWIniEw9mQIkLv6zfd5BZVL0g46IbI27akgqqY2AI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FQwwJYE52xUihSUaRF2ethy84qhjpep2k4uc008CgTco559HNVKIxHyBn2XLBUVPJlrq/99IbxQa7V5ZVjk6X8Z8dS3rLPCVm/mtpKwSSzqgTe5wFbSUuoPs3ol3GKOJZ/XUnAZNgZTEV2na1sd6BtkeTzjp8XSeKYxR1qbd25o=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>rOR9DS5gi8WrjFlbXFvcLyWC9xiute5OP7xPQMUVtZfehcsRuYFsi1/ZIFEtXCVJ0pdIofTNu0zSSmDlK4TNDaMxIq6bPCzRZd57hdM7PyKhoen8vMC3R7eOVT9b53+/sl/H58VC5Sw6875Hv6e8SvXeCxCvUPe4/lr1KXh13+TVZ0pDCEItyOB8lMcMpm4tfb2dJzt3owXquW3rWg+xB7rWaJ4n7CSdQ8uqfhyJYcF5HQTrlvow3BMjTj3DqQI9zl6KnPa9EX63M+LF8YMO5uN+vu+3GmO64ZPwRmOtII62+I0ViqhSMrqFWwZYPQHrDsYBg3Dfk/4EAX1kD+B1rcnsOyLBiXuAshU1UwfkOLcQM4Og8l+4LhO5bCy5mMvBh6u5wkdWw+FcOUXX6ndikXH3ItCggzmVq1jdOhvu4EVj/fgEhgKeNcTpqh13nbi3v1lexdhxFZ5WNFzcIfqwqznWIB2cOZ2GwhG/Ujw+BPBcT9YYONA++MGBOZiW/jp2lS93fbA1HpHWxF4UOuCDS68T2LxFr89gq27yDwh85oXBWIDTcevWVp6vvSbHbB48xg3Lc4Q5Jz5ZLDndSNzFtyZrEKZtMwC4bnQWui8PZxUlRrL3v/oQhQl25rXxO1y6M80FqBM5By2EnSSKpmmVG0ivGnoNYjBJaEuLgAPA0mcPFT363P5QT+WuTHQyE5r08WL4pBFSTTezbSVWcUUALJ+t1jwkx+BeUMas96S/5RdS8Ou2EmEHq+NK1zPCt8lYVH5BZ2uTz5WtgmP49N8bD5eOwh1N4xloAynZJJxJGz7snmgXRmQ5xwqNojeCOEG/+ec3b87AriVEKpjgASFnhmUY9aJL3vFBsjfGpiw0Ihcajelq0QqZd8P51ERyrdQyge/4Q74dXN2a00tbfZRCHtRGgKWcdAhwuCJ91hreVkotml7tqZnR6c5v0t0tRLuMAk8nwCTSDyBpERsiS1WBnBtUcbYoLXN/kZmJhl18p4Mnyd7SewO6invNMqYxS/ylTJqrv9c9DQRfN37PN1uOsB3Llu3+e41gHimZwag6Rb1LOQd3qiK3pB6CSwqkomjJfCm4CGZMKgAayBiBWlS9NZI+kj1k95KJHH9EOk4pdSoSJLnrkFaQSuxBgs7TSJvqhVO8/AvUIY1cxfR/e2snvzCP47E0udiZcY0JNHiWgJyujPZ/DrHZVqRdw0ZopTRfpZBcTFDpxh2Frdfjq3EuhlVjdz0jHK0WGppn7mzk9SbsXcOmydGMHiTQpcnryI9FdQB6G3Bp+xbotyq/J1t45rr9QiRMCak5W9N8OyqPsoWtgZ/LbD9r9Q1EgldZwOsSe6mMR0Mu9g4aujbbqq5KJn8+YGfUcynmXfTanodKJezDMLnLN3zTq1BKGoK6O+7wbRpUNC+1fZQqp96pTQysPOgBRlKiFauNCboIYtE5i5/97qvR2L5dXCkU8zaRJ9zNCw6Mqeow8nhPRcYS7sIkFDbfcJQn6kK7qfEISdnCUF+phzPCS8qgy0x14GDqPOHmrD5Jj5i6ZZQWGBe4Czhho8Pl4tvPnOiu/gg0BLLdid3EqRaqnAG000Zah8Jii27hhw3SjCfoN4WN1lnXHQxyDIck4mPtcY92c+rM0ZY+39KPmBdnyc5QHLh7VD7dOlfyl3PnXCdOsSd8kbd+vnBUk5X6dgefbKo+aARhlkF6Oqa7RKdE0vUdJTKSLM5PHcmTmWRiEFV3yhsRQ9MdUGcaQZOBmh0ZVhEfUITyL3R/yM3ickrXcpNKMf2PC15mp24hfkrAJ5jdKD4dA9ugWz33AnG0r7ZSfzpfT+Ob8PqRB+p9nYc+l3oz58b6YH7noSYmisFcuONrgfykoccVEicgNas61r9uNGCKfqA0ojRaFQU2Dpf9IquLJgAjjUnX9YjJdbZOAFJywxN50z0d44d2GsiPSgmyBiq/ZPFEWsJrXg/D42pAwqSvNY7NlSd3k0bf8QX5dVLtZXl3Oa8AD3V27ahtL5fgziOKzYfWK1jrSDBgmNebr/VouYQpFjUZIvyEXvdKydOM/f57QUeF0KKaR7T7XpvZJ2Y0zDL25MowalYkunu0dPUYwNh6DVhFBkb1wpXiKX0oqUbzJTC/sCvmcS38sXBdCTyNBFsfzxJlnSTBBLciEUXU2NSdyd+nqzGUNuiSsh4WjWCRP1O7entTIHJN+BzcnpPtEWbBl0+A5+m1UE4W2b7ZJ/Nzk7vRaTeL8plkRqKxrQAioNapeOfipIMHFgeRYaTEfXcuvrZv7iV/VFxPvQXtaEZpBGpsrUXIyBjJ7YiSOAo083vLff1X++E0CrrMd+JFKrIpcUajNlCCHfzEjkcRSfzSG4MhTDphQQ1DXOzviHI2kWTvzittxFKkp7+kaQfxV/H0FayvklwuHKVKZCtuUqKWTZ6HmI9740ulODVJTu6QyDIlhf32aBNY2I+z+whdspKc5X+4OKHVCKwO+4HDfA+OGMb0alvHBPTHgRa/Is1pC9io0Y4kE2GjyB+gguLkpKwfUn52PnBUJJzRLAx4EVcFZe/rMRaKSUJyhy6rRR18O/T0mhQtl6YH2PUB3crX3nwJEB9uEKhk9ic2I1U6SLAdF0LfmtqbcufzMe61q6tOF7CiaOW/ZOqEqs5TaQe2Z1OAeKBTq8Ip/deEA5jCzrD+P29ObC+x56634h/MlPCm+DjZDkSPDCtfpFq22+YfmrPWOSI3oUz61E7UqoDaU3MmlUzFAOUG53PPYGGXhtMyDFoOIgJKPcsFvSwyjW5DO6lES+SzUkE1XOzimbwms0qdlsMh58PuOUESDe+Z5dfbOYqluKunXyz5QdydBsWwByU3i32xI4fA7WmeYPY8mH1ER+Enp9Gb88H8dDqSxszL2Vs3k+7bboLoHbux4SMwfRmKbfRULuKQxzuQX+QG0s80Y7YO6UuXUiEd4zjPy8HzSHCc3IUBtK3V8wKEo/y9oXA2MDVsrtnjk6pAgurREYPEWtCEJrGxqrQmAtjw71wAnabfF29Y0F+A5dXXwYOI5M2cxbq0SORl4L7+mvgoL86zVdyxmcZTSvyDBD8XmrAz/COme9GWD/PlN8w/MB0TyYoZeSsGnOjnAQS1LpbfY3iqKghQAElgaguU256BMxkrv/jcPcU5Cw030yOYtMNdGSGDT4z4O3e6WixPP+jB/vWVTXK4xDh9VVtbwU1tdTNGO+1HN8gzcBgqKCEFlsMJa+5Hyg+GfPb0v+1pkpQLytLpkf2EF1NK2tQvy0tgDekIOePeVLLexOJPonsv+XRE3eTpWTtGCbT6xHYsusLc57OabXqUanil2Noq6ILxRt7lAam/Zh9Uni0lMO6LXt50WtDhfXWwpUK4UBmhZK0VlTSuJ+ZDSsiUEdDGvjP+7J5HBt4mIbnia2R9OWzpLRvduulieb1wR9QUCMIuFthJl3kct/mkXHeqDcVhsMfEfUEnRsNxkqosXxd9Dp8CPPq8mMDRmHi/QabU8OSEVF725F2X8dNNktRmy5cF6peqg8TDwjmRj/HdIjLzm0wt+eixPxlJyguQswUi8UkBQHyN9U3cHmKHNjXGOCbq8UXkLk027DS0i4y1uOSsGv/NshxFFVMSNvy3H1Ol+gWCsVwRQVV0rFmPrnvASSRXuHApq7jMSKrIYtG45EIOIRKGacGtjSlAdmiR8NC0pPyFe1toOC2nvOKiIuWVk0UYkkuqFsAtxXD4sk04SurD3Lz4CCS1OjGOZQ782UunelsHc9f94ubBSS4e+II6CBxMd1bfLyf/JZXpwA3oK/eHYpjE1bKxdUCz9UEPshJKX5K9k+/Pc49hh8uOeMhXxxBucSZZwh9v68p8DCOWPxvy6Qjw8hTYXaAfrl6BB7pNyxpFrSe9+m08IMEhBrU5bZBJkvOsJ/CNH4ubkBPmtX+bdYHCGu73pQQhPGsXYEYGHQfgm1nWs1JMrCLPfWJcjGT/VJpplYP4swxK2/+dVap6c/2hsbFUP5R/0azXLbXvEg1FOdw6QxY2Djk/DcinxTk36EbzOdKJ2U8LmvHTcXIiwaSXMYWKxAJcsRJ7xoRXkCocRHWyHDshbjSVVrmuV4lyR/+B9LbiPOvK3gYsg8WVkN0LLf6GtLzIz4V/DXsgaL8Xpt6LRU97g9k0t0L0SnvF0z1IdScNpkDbHOsVEcCcVIqLmKz19dI58qMZ+cUu6+HcOYC5SdFyZnwYm+W9H1y1EyhGbqTSrEY0FGCxqS3/MwioeOiroukDuwFer+/JMEHRyAxRNM7A5U2hvA7LzU2kRAW95PMUTGInOXXopvaBsMk6vZ8OUh7M8dMagdpRX15c3wNyagySCwXnvCJuOY30aYEzkKdE6dqygkGAzA+DoAJkfX9m565/8lCyb9fN/CY4vpWh/dEF7D0jdcn5qluY575z0nOtCjJXU6wShB/luHb6UNaIIXFNvi+VTB4o+rM991gPuZCWm+ooSdC7WyHQcgCrwXZBVXSQiDeokG1xVT572pVJU8UeVPYbQNcyKrCI4SldHE6E/J8NSbJ9GGgGsFU0pD14utrO5SNLBp53ce/ICpEm1B7C2jHe6ttF6ZK/dOeF/omqtjBPuLfwFMicdw9EYCfRsWhyqXRexnWMhcgCbw5+8d24ES/S3J51/q9YBM/8Mi+BUpqgpEddDmw41jwrTALBdzaQ1Boc14+qS7ulY7YqKY88yiBxPQ3zUKE2Jf6GXoCeXJr42+dzhz723OAvxUzWHDQbgEJQ9fIEebUpx/AoCCP19otN2fByRfmkLPgeYYhGKgmrYxuPG1G/Y/KcODAmDGp+ko/6PIPy7sv4998d8Cn6cM51GLrq62kmueJ7if5cR1GUCLskCIddKec2T22ifrscpd/y9/jTQ23mK1E4hN6SjaVNc+CIMeIFuP5SatENlqvAXYB4+NvBggTJjNGqNa1WKvRQXw3Fy5fizmG/KtGc0yIvLEAu1OZ+4Rb26B60T3jXolM9XiCPHoopqb6M6NTowGs6EIIEZ/u908p//idVMR/VKDPAPjDpTkwCYXmL/6g8I7kP4nVHMNvin7WaiA4ty002NFrSd4TWk7Q5La8501y1SiaCmJodXVbzNTyQaRX58w82Xav/rPkVRFS/2cGNidkOx4uDT5Trj2K5KOYhcLp6aYB5hd9S35MOu/okL9xORHUIOavypLUCZXRdR/nTuDVLYv50249ymU2eDCmSNdWMWpe4v8tTKwFbt0UhWAe80QaPaztJzxG4h/4yy8ztb+9YAxuwwaI7xixFkBwgNMayBUQJ/IRuvm/PBFVWyoT7lchrAlD9pdFmQdLLm+SYBrrxWd9Ot5z0X8H8kZ43Jwm2Jsb92Bu5xF9rkX9xjwBkyigE4lBNNU1RjY/5xyph2jZu2/CEtMj3LP87i05Tii/Or04jBFctDxSqwnP1z+KsS//aXgw6SAwUxzfepBCRWwPu8NdmhMdS/ZzL3x3h06MEZgE=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.