Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx279525b2-e4e1-035d-cbc8-4cb856ce5f93" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx279525b2-e4e1-035d-cbc8-4cb856ce5f93"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>AJXHr3qt9KNcmkhQHRIlJrKsmRo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>zCBIwwNIRt76jkIY9zuWEQv5XmvqGtltpRMGoYLPVnBAWC1lGLLUe/iZXqMm+cbI4SwADC4iHcz9ttuoC0FqjR5PsrluPO3M92XJGMz+GfC6YRiyKSAIusnMm78OaFFs8Z9aqZUVdKN+C1Xa66rR5JVIzbVEofpStepgcZS3mOQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx798095d2-2e75-291e-8ff5-9bac7a5449a5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx798095d2-2e75-291e-8ff5-9bac7a5449a5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ZYXgXLJJ94cScdDvTRqSYXg33Ik=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PTwjd401zDSq+3rLQn188Wk9G+G6L791wxWTXltGGR+yYxYV33wTL4FcguMGv5Zw+TaUIQPNMDjztJxypopLWcNF6xyq3YSjxrXetSuBeRghx9ojOlZVaThXwK5I/47e6kkayAh4tZPZ9JEM2AoTKDw3IjHQ9WvhDmjxeI3Q/Fk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx0377c5e1-e1ba-7063-f397-fa2ff3430661" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0377c5e1-e1ba-7063-f397-fa2ff3430661"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>sutFyQXylSQ6I4EPNHiEOk1KLfg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>u7D62LcVLm6YjrMbPnwnoeVyBxEjPuDCaacn2UEcrskcviDDtJs834bA/mTtJHRrfSJc2vPwjClEuyUUUpP8VtC+mHy1KMbMdJ7ijMivmXJpWzqQrS0vgi6bwWEhtD+7h0BwBjZTWVlJuVRDeOhFU8JgHahAq5Zj0KlKeMolhNw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx8ced1438-7538-9066-47ff-9b1b05a82983" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8ced1438-7538-9066-47ff-9b1b05a82983"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>E4cc2qTRK2MCj+KEWWecS1GLWsk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>qIj+CrRL0b5JvVH4CIT8u03JRq+SQvetA5WNGxu9tWZouLMEK4FhBtJT6MTr1ZFmeLUUrFPeJaDBH/QPqaMAyhuQYg2eSrGflnqfaB8hJLmOKOoJvDu3ZSufNlYznNZxCOQ4iAzLyyjxyKsItPlB6pvrqLmoX3wOyObRtD+Rle8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>XbrzGdTlqwku+xCM8H83qG1hL5OURv4nGEZvGc6w+3QMaXwxSFvlx7nwg5OyMZkO8ErRicT2heVjO4r6QUnh3TY5bKsN2GRtXCr2LpgVuG27a6XIYKsZ7N+SXKSkd5ywOerNt/drZEt+TBu+vQLM8BBjBYL9D2UnnWkp4DsWsyE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>KQytqyiRss6/xhpFDgoRbs8WJkhSV/eEuIaH3bzbvijpwpYeEMfiee7rtIueVp6eeK5bS7l7r4Ez0C/rssh7PATUkyW7WenJcbpwhmhRsceUlysTIMyOq3SADGMNA7ZZNI4cX2ZzGkKO+vfcCrosEg6E15ngiD/3LQ5SR77NsGCjxiOfIMHazOWVVxZDkpx/vrgm7YOLsJYP4K73Jb/UyXPzxnBCewMQOtKQwPgNpsGyo9HPss0KCSIU44gL7rrfkBPkUKqOJ0GinOCMrslwQnA94IW2ziNHhNraFZVnF9mzHmzsi7naU/vc7YiVYboyvKvPGw1js5U9rvhATOFqtjnKls7Kc6QGSL2CDNH2YQkQr9FwXRrxrFca4LGclzKVAmvdAQSaK51iOl1XcaqUJ2WhE9RFsE/ANbR8F417s738Wc/s21t/K43OMIWYbFUM+Cnn8IluVazQQ2pRjufn/wyVlL2VlqXfGv3uoPfGF8t8irKW4W5DbgXmCudOOA5W9VXuBz+xGnB6u8jc9qxhUGPfm7pTqTFC32gTeQlBXZiJedyP0A4NkCPFaPOtNUCCSyDzBC9tWL7EDusTj/CULoyx52w0I/kxc7mwuwIgPpmjxy4RC9YHFjVYv52vbS2KZJrMzep6KQCQoyqpWSLt4cK+lHk8gc0bhgNwOk8QiM66nE590mMEfZ2wzr0YXnuzc9VaEJnASwP7GliPjzn84xDgjTEPiQFSMTLPpOpkDoy8X7lmfz7CMhom4dUrSb4H8hiGfaJzgSMQ9lSWavmM/8r5rnw1N72kpeYzwRFOZ0HdpetqCfK8KCf2iEzDxazr8Kfptpeuz8cLOxVSwepkRjBUVpxb2jFqz7woNU3ZmMWKmYawBSjCcBp3529nxaGk8sPcTZ7j70Qm7j5Fursysr56bw9UXwJVEasMFsE5sXAs0Z0XJJgWSXvVcO22POcTJEMmiIJV6OUVmt5ewj2VYa5G2fnU8wu1XObJ9MRnLlG4B+sMrzAF1dhrr/UbYvVKgHLATgCBnpAh+zd8mcrLD1NiI0RqtFHDoawEkp73umR7rM9u4zb24HTZE6j0C/8HygzKoXr6Nz6TUYCzzZ21URQ7HwpM4NaN2j9sX5wn29X2NvvMgSo0thwUhLQI/a7UYi6lcMMpcIaZUaT+0RT5w4TcIaDRXThqnuRXeEVHajTVBxoKgIktz3OnHOsLCSDkRO07riCob+oDzp7tFZrygUjdy46Rk6/i3HZRm7bLKMq6FK6rJSofDRKOcWxxDDKHzviCLXXTJeZF58zO/W8mD/chMo+BzlSr91rgrNAp8qrJbC0rbJKUGW8WB+FmvVDlqAARYTY4xaiAb00uNNnzZspL8QUBZ3Wx2r6yAnSShBvjKt4OXA8wepuyUZQOkRB+ScM+fLLb2mn951Oar9pCarhT/z8ec1x8pP+b60zsXTbURnl2e+PVXVxS2nemE1I78R0vcq7bXP9CvaSCDtZh8AWDqUVfKNdYnLJjf/kXj33YUVJxvAMEN8Fu9yQrU0IdFeLTtLDfjqyLwxkLKTHE0boLXeBNKYomjY7IZ5jNUZ7Th2xIhbX+7lhJ20zUGGLrPb+V2cRlW2KFwchhbmuqdNTkeFc/m45ZKF0snvl/Oe1diOIS23pK2q+k28a68PJ3g6uzSidQuis8RVE66OELTCWTB81oan529LK1jh6BPWH67gDk7Grjotqhz3hRuxmGuD2Vq03RwCQg2Ir+CnfhTS2db51Lk9iAW8Yf7bPQqA5IGh2aySsooRW8oQ3jGdh+QYiSn5brUWZSZdn8PpriI73aXtsK5vfbGYql/AaY5jgAMyIXw1fJf9RPNk0Y17r5mHAc9AtQE+TPSKL38h3vSywQ8Dco0/VicCFdLuE8oa2nZtBR6yro8tcD/3kKhoCpOcshHtOPyk3daN/wRTEBDxya+uDfD/xgCf2rG4xJT3XCCn8BYTgF/GwGoKkFYojwYNIwfbRiCsp1GgC8KY4DM6LQXmp/JgCi2srkZDPy0USN7ScQ6nft14E+OpTrS9poDHP1FC9Zop2DS6Il6lVXK/jJYtWXXZVV/C9IF0DT6qcaY1mGMxI+YtyE/Zy5Iklh/11TGRnt77gOgNCMU+uqzgy36YDZIdvEoJL9Ul5/uzjAhd9aeM9etTbGqB9kfyE/yb6n0OHfG6UzjmTzwdB3lGS3xGyM3aPw0RcpAfHwLCduPFpGBgxOJ2pOIjRQ98O5LIaz5ki/yPqj0XqSwpcJhXxyQtXk8xEKd+th8EOVlYMrKcE8gZd4E5tP04y3L6CCbP1QHUGuYrRVrrO/t9ENhEQiXDDpbnuyyvDSzX/ZzPEphBgTwCOBajI9o7jHqYWJ8aS2nHQYXDD4v4FKrRtRk8D19w9tNdAEFMFH4qHhsDanzMmcUqSLWQ++riEv6vDOGSnv0jiSVlmYhreVdo4xmparQITI8OK4lNWBz7f4anK9yGOo+F1XDjMCUvbKsNkLr98GS+Ko+Iq+k3zJyDgKzL7QVyR2Kd3/zaCVGXAoUApWokdjLE8QDa5ir8TD0cDaAW9DmGVCfgR4m8s12FTlytPIyDaTKPGGD01hWNgPTPC3+yFyWEC4JHBIdgKOp93zarfYJemcLo7E8hYrxciigDJ2A6GD6l+uMUYNMDTUPGQXT9ubFvIYbPS0COayaxj81l7cUQ+C8+UD8z2er12bgHx+XloU6Fm9zqQmY9J3WRnJVYxaOT29NjfHxX6tACoHGuu211xdatWR3jU89O35eoTn5vlxM1PsMMNlGOPeCSyj5hkq/RzSo88f+xbxG/e1OOMWCKO+1s99aV4FbnwqIRN6Tw0vpjoLkacMOsjs96/rNm2v2fk5WzX05rB8HsaLagBlXZJ94tSPO09nc4B1pS+9SHa6WCTn3+dZQR1rlkw=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gFqzWxLCicZi5K8QJPxCB05V7H2+lDGi99jYwn+a45HIChBLmC6Qc0Cbc+W+wDbyKmfrAsnw3UuEGZu1J2frq1AI1ZdaxrLSdeEJ9B72oPyZTu5xNhvDqkrPr94QAQBs3cz6UQl7w9ebEpkkdGT3ZpmuASlRFZAU8TBMEOce2II=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxdc69cba9-6a86-b85c-ed11-650f85c0cba7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdc69cba9-6a86-b85c-ed11-650f85c0cba7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>by/vo12msX8XfTf+xzKB/ZMkaFM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>pzsmbYdrOQ/o/wnslNgC+gMry57gBExv8Qc2qLpI1EUCskHMuW0yVoj54H+CR41Wd1wuQZF04zOkGDavC/qkDjYWSVGJrHqC4JSdCQqt6JNb7uLKU9Ob+RSsyCzxsoVGPHi1Dp2WN+DJ2aSFJHomL0Lpm6intdWltEheOABNIew=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>XbrzGdTlqwku+xCM8H83qG1hL5OURv4nGEZvGc6w+3QMaXwxSFvlx7nwg5OyMZkO8ErRicT2heVjO4r6QUnh3TY5bKsN2GRtXCr2LpgVuG27a6XIYKsZ7N+SXKSkd5ywOerNt/drZEt+TBu+vQLM8BBjBYL9D2UnnWkp4DsWsyE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx42521f14-afff-a1fe-0d27-1443ed44d3ba" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx42521f14-afff-a1fe-0d27-1443ed44d3ba"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6HhkZt993L0OQTyxtevEyit+BDA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>x2dt2XsYhY+T2IUs60vvLib7JV/S2DXHNdgGYpI/kUyNjV/ejVqzzIXieHczOA6bCtr1yN+rsoGACBfji+fCFuqltBkbfkjWKnXFtO0cka3oAM2FBUHREfnjhLkd+F0LLOgz5Rfftp+HOWR49qzYtj6TMwJrGzlYJfTpY6nLt/o=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gFqzWxLCicZi5K8QJPxCB05V7H2+lDGi99jYwn+a45HIChBLmC6Qc0Cbc+W+wDbyKmfrAsnw3UuEGZu1J2frq1AI1ZdaxrLSdeEJ9B72oPyZTu5xNhvDqkrPr94QAQBs3cz6UQl7w9ebEpkkdGT3ZpmuASlRFZAU8TBMEOce2II=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.