Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx993ceea5-6745-91bb-5f6b-5b20d2b4d2c9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx993ceea5-6745-91bb-5f6b-5b20d2b4d2c9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>M7WXFRAbBR8Od9UgHoToGDf5wiI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WxD6pMU+z/0U93bTJqvnJJRMUmk7dDveotSQABh2UNOvTySoc4V2Y2CVaNkzMzN62hWsBBEkiBYzoqJQB2JH0nqdPvSMIL6V0/jeCBj3u+i18FnjzumYDtcOZbQJTuUEKzCRhdwkHD6Ncwak/9grhe/dMFHLQay3OUZQta6eimA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1cf58688-9b89-2757-86cc-a01ed4e85561" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1cf58688-9b89-2757-86cc-a01ed4e85561"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>gPLPTO+PbG8/0Pk5cPWrsS9TxyQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>saZLrbHZQI5mdYONVIw03YWbd3rBfsl9ik6h/BeUVHPUNwsNuq4eaksDbmv4FjTUEiQyvd0CvBkQiUSBr4jWJckQ7aH6Ih6dILA+eA2ZGEcKphFCfBWChDdNoXVIPBS2KIefkEqtBSrm7BeRUavpJ4Q4bjsMgQgoKVAkHEXTm7k=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx519f12aa-af2a-4877-1216-a92c6c5f7c5d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx519f12aa-af2a-4877-1216-a92c6c5f7c5d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>QqDc/fKxa+xk5IgAM9AXkySOj3g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>n/KkkrIBoY7nDh/VVJt2SKRIWuWzoHaXk1nCGn1cQFamEaxEVzchL1CK+3MyrumOT57yLtDRWbhoxUFEEW9y2SjS8Nh7PYEJHXwVcs3L/ur2+fWd0qAj8ZfONuG19XNNRJfp04aT/Ca2XjK2ssmDn3tIUefDe9iAXjO1k7D82D8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx9876b6e6-fab0-08b2-f9cc-f5675a72c823" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9876b6e6-fab0-08b2-f9cc-f5675a72c823"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>EhoRq+QBiY/X9LBLnsr82px4l2g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>GrfxoiFpsaQVaeQ0Bqb5F+zlDebhpoymBF05iwdP7wxcaDhKH6Cc7YzJWPpUqT85B5CjN1+FyNunaI766y6ad5S9mjChkhxJ6CKxUMeyNQIeH+Ha2Dis5FWwFrk/PfWyWfM96yER9dlvZpI8n8s53gO3WWE0TIMaTMW+fwcMl4M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PNKeo1s4Cf9M69/DJbYQYe7f/+6HBYcjDGNtVM31Ea/1j768GjwD3osZyAo6N/3/1MXD8ZnGu75wmOEZLPwTOFTPJ6XZE+yD8zxv9uK9wXCsoe+n+My7EVBeiwgX38GWmv3CAKnJ2u0PpYGo0TICeMkhjftH2grQy168FBapZyY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>LO9/hSikKkn0eCoWP1Vx/kL1Jzbm02ix5XU6tGnornuh0C+T6affAOkA5jaVsZxtNJTuio3J/0t6braZpGrumjGYqlNrUbGmEgHQYaZLACouf8V1sG7op2gOcZq1tBOcgt4yACjqQWWdVYw+dfYKSWECDyfKe1IkPJYlrO2L1B0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc2f2ca9e-6c02-0dec-9ebb-03011aa05e7f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc2f2ca9e-6c02-0dec-9ebb-03011aa05e7f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Hxdrr/QtlyIbFj5snulZ2XVuhQA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PrDurSyhEG9CqkiJpFZbZHVZpJy4lTmTo8ZqSp7xBlTo4uGbf7+kt0a1Vb3zN1MClmRWsza+Y93v5shjypUdUKoJChMyGLPS4/IE57govHyg4iWrqjdw/l0mK6ASlj5V0hc4ocSgREbv5K2ugqiJjYWNVeu6NvEsBLgHjtIy2K4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PNKeo1s4Cf9M69/DJbYQYe7f/+6HBYcjDGNtVM31Ea/1j768GjwD3osZyAo6N/3/1MXD8ZnGu75wmOEZLPwTOFTPJ6XZE+yD8zxv9uK9wXCsoe+n+My7EVBeiwgX38GWmv3CAKnJ2u0PpYGo0TICeMkhjftH2grQy168FBapZyY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbdfe60e4-107e-7ce7-52ed-3984481b6ec0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbdfe60e4-107e-7ce7-52ed-3984481b6ec0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>cEUxawsYEWXg+uarTeWasnLyskE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>f/690JcSqY7NqfCgdrKD08Y7aLCpDo2EfQRvaYPvyxBfxIIrF16AmSVZkeRDczAZuTzcUpaUPaFMwxCpSp2tBJC4eCc3LjyH1PeF2Jyz0ZJjx+WRn4xfPb2lpIp3jtJGDjnDNM6ug8KxFJvv5KmFb+9Rw+gxgSSp3iJkex1pXUM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>LO9/hSikKkn0eCoWP1Vx/kL1Jzbm02ix5XU6tGnornuh0C+T6affAOkA5jaVsZxtNJTuio3J/0t6braZpGrumjGYqlNrUbGmEgHQYaZLACouf8V1sG7op2gOcZq1tBOcgt4yACjqQWWdVYw+dfYKSWECDyfKe1IkPJYlrO2L1B0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.