Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxacd31fd0-8285-b3cd-4d65-f6128121066d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxacd31fd0-8285-b3cd-4d65-f6128121066d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>y72zyEg6LAdQ7Qt8H7tSGwVFKhY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>HuXXye/b6ex4HGR15w/aFn1Xup+l63Kwg48ui4w7WMGEf/UOHzFGvsYV37E1jVKrp89c9bkt8D/sJ2/u7kp3//Eqi/ZesVNBXTbjt3SgZtf8iDHZ4f5pQvbttZNGEvies7iy0o3++HrRYYEaswdLbo5x5OVYi+03mqfrs7Q0aMA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe3385804-225a-7547-efbc-502cdb7b95a9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe3385804-225a-7547-efbc-502cdb7b95a9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>EP379oKUq+h3q0tjFh6S+JJoX+c=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>M0L98jV1OXx5lN/v/1qpV29JLJD7Mp7URc01GxTgeya5J3bRR4GqJ2U6JDfNCemcG5kq2aFPG4rKLmu6dxtNbq7YiUrZsmBqudMc4PB+JuBGaqWf1K33c4TQ6ACYhtbsauYwGjJLaS9Uf6TMSqE7qyHViEKjPz8KNPtC3TC3JQY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxdfbffaeb-5a86-83b0-b955-c282dd49b4b8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdfbffaeb-5a86-83b0-b955-c282dd49b4b8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>kadp3dy3wvrFcLPgU53aeyqMWo0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WmIQxQIecmzLIg1BZlPctgWRTfib6z0EbvRGrGOvriG5LOgQR1dvfvI4oHmlUrPETBLA75eE36X0olE8+DO1YfKs2L1xyVCLLZRq9Jk+MLPdI1ILIviNFNnvLpUIPtJxyJMmb1cerGp9o/IYza87L9+7JdcXFupFdYoO2sh2qSY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx9e53c78a-940e-a34b-20de-08692ff3966f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9e53c78a-940e-a34b-20de-08692ff3966f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>nGXkAz8OBKdfOkdl0tuSzvucYJk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tJkmqs9hRXpEyFonenDlNfTeVE5/eKOppRge2X2kwjtSKdMrrX3dc7Qk6brFCaNJeI4Uj1AETNnQEEv2ed0g9vn2mv7EOMMA7QIQcFIBc3tdyDRxBGfThpKXL7q0WVsAzUGRYHHDocMZc9/2+hvvAoDZH1NPcz4Mckaessob7UY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gg+NRqxu+a3DYUb/ONvYPzc/4s6L26eXsAwCfXqlUvGedEVS2+vQ79ifaMl6XCJtV25IgagKHzImtTmmD2/fbl/ZuR6slDWQDsSOOHEI0JpoDcSTMyTs8xWrmw8sX167UNopKHNOjcRkET61wtu2rlT5q52RYlG0mLpikrJTzm8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>kr4foXNO7J7Mnf76ekLIljtDVwTjMUnjlNdM2VyhsNFZA+/mPB+JLj4VMF5sgxF0ZtNmyGnkLsNT6C1pwQpTBkl0F/ysjJCNj8ojdxV+fXsJ62CZ1Wo8vCE8WdUjORvnS73TUpNWN1yPjhhrXOMorfkkATgJG8WFnPO82JJdYFc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx91a9cb52-67dc-ba60-1852-4a074bf9cb88" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx91a9cb52-67dc-ba60-1852-4a074bf9cb88"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>2+Z18kW7rYdx9K2/wYge4wlkFJ4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>blTxiYA1wIN/3uFlyhDvPORxhd11upWM1wPiB6jalP15L4Mr21cuBkgUw8Unvx6y81USLQpTujhC5Y3ko0deyciMcayWu7DWaLBtCK4BEwdAP3y46BcrZYVEZrj7pDUl2Rzda/9oyRs4DRWhMA9PpgYDhJXEBQaeb/nHnO2qP4s=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gg+NRqxu+a3DYUb/ONvYPzc/4s6L26eXsAwCfXqlUvGedEVS2+vQ79ifaMl6XCJtV25IgagKHzImtTmmD2/fbl/ZuR6slDWQDsSOOHEI0JpoDcSTMyTs8xWrmw8sX167UNopKHNOjcRkET61wtu2rlT5q52RYlG0mLpikrJTzm8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>S/STBrDyL+IejHGvWEC1evZjAEDTnWALyvi1oV5mPhoKqpDiufSIspLuIfzynkxUHbvz5vMvojoHiF/G1zNOzw8igvkeQt33bdKzROWvrKYux7j/7H/xBeiI4Hnde1EyDWxwiYoiMbznIG/ZMQDlfWW+tAYbK7d4TlU7s+H8g85zS7EZo40hS0Zd407kOeLQE5xfLfE8QCUzj1R0uYdLDihDxzInHV0ipWvUWTEKAoe+cmQQk4+sQT4pmP6L1nLZwnkEPatTeO84PlqU78vjPws8c9COpprHJmHSU5iZDk13U2xNRg/jJ6+zZ72x3PcrWUaq/Kp2cOVHFh8gqqnQBHO7czRErCH760BKRcbDoC1SFTwSfZF3Fap1LAMpjqpRkYqqPCAVsB69MMgmmjMamxBgjrlMFF5qWHu7IGtxygPdoir3ixtSHswldur6ZDC492RIAUWcWVP9cfS6WbB3IwN43mA8l2ZWRdn6MmLxXb/k+3/pvTs/HBpJfG/8O+WyRRdGN2sU8EieTLoN2+pwtNPnkJnGdwBCaUZAyLHvZs7IUdOPMtPO8YtutaAV6r6dGWb4TiPUFd/DnBDEPYeqpB6qaL8Gh5rIcoGL0+L7+ohbxdnnDc3Z4qpfy3YQHKSdpwZ8vEk9zbExrlihYvQhSWmcTc7tSj3xdYjDiEh281ToNHHtbRfT95ZWGjU2QI1NlXemn3nfbsrqw61nl/1w31jmttE5kWrllMxXzct9On+JEpjL+NRydrKQPdg5ydqyp2Naqswa6TVGXDKkfI5dxO/vK+DivwLXbBk7BISDCiRFg35NVTc+i1eAfXDaa/ANLqu7s4Z8svWuW4Xqs9LlyFN2D/bJ7ycgUbOyp/6W+Marl6/FORv49ej38K52XjTwWUb82TkVT3xoE1zWbSskF45WC56vSQJ/05pbfBfr6NXAX/HS21ITVgZu3EZ9ciXfW6ris0LDf4JBkLy2OgCbYbXrzxQMgBwUGTwi2S6eFfL3bYdsTfaakFcvMkANG5+tLcBB8tzVxkgTXvhcmf47I3pyZm+UgxE+TKrhbAGHB153gbe/SShWv288MfQz8nylWo/fwbs1YVdFBiEsd83eivkwj4Gh9sArqN8sKV9AFsid2IZN4BvivgySAEZjCNUUzsGisoR9dPHp6nhNHA+Ad/LqUR/Nq/pU5bNxEgUdUelc2FnjhLxYFCrC3zFAi/WdPb6eiNS+RnrthSI64G3GSF+tTb1S4tvf2rdLPvPCeihJXLns/racmEygmHNmvMKtIB6hgn+2vrLzW6gWjuSzk9w88TjoFrDUhkvCKsq7PBW2PAmUxfJyvdVf34W0SAuzSQalPaAMkyH8UCykh+WPDgGgQ/NyhyDcMd6L60H6afxwRiq04yNK64+YA7O77BFQRN1+P2wpfWg5Sc8FDngqNVoXzpWcBiV5sIwbMPoj3A09HJBSC2D5MNa6tTKISUSAL/5E/+MVMtQiLhcSwTMgma8yk84lZ7A63FKDrGXfNQsmE/CIMRYVSMTcw6hTqazEYXxpwi7cLXj3DZe9fPGjjmyZU5dAzHNlUQwyGlmuQlsPcnrQAWLwZ82msC3+Mk3Ae6xxyTG16Xd9vESU+f3rN+JXhdhsNbetuyqm0RZ6+qXgxM4fBknSQZ6WgCVHGU9OO5xEEJWszdKtIl25BtzxYU3xEhM7JVx4nJf0f2QPrjzEDhj4lTQQFYkycPArOGIwqEyViRoVawVTHweWEpM5STiOTChmzvmlGsIu336a8SxamOpuXX5AXqXPgCv5xisrK8bI1QA+m0dk7MRyU3jEwSX1RX6exo7whuMyZDs+IGB9qKt1qOAf+aTBinjHcmDNAtbDNBf+kt77/ZTPWFiHLBRNeTw+IlXnVahpL+Xwbno9lStR8xQQqsDmaPmwVyP7upuaeGbCwpTIE5z5av3svWzZzugPvTUBHOZe9kEUeBgtzMIxMtGO/MsESNEiaCQGMQ2ApZK1mVbRscSz+Qcz0HBEe8XMDoNrh/7xUDmiYhVi9dayYjjehh0u/u3wSspKOUGi5RljnslVP+FQ9oSgEYCiLuSZXJe2H1im/Q3RZb/ZwHD6vcTvSZFxzaclQ9ZxcOsUlYW/NPVhmY7SygTThtCGOTkWg2lZf6FRFfz/HscjY04lG8UfhXGLaBKAKBZfc22XMIvoxy6I7dsyLf0rZzV7mYjOMG5bFCiT+MhxIE3mr/CydjfEWAemBsC0I8MASd2elsTzGrK5dFtgWcf9364qC+QeXs9YdDaxz5K6/TNkfJvM8fw5aCSU7IKZO/jx/M22FXC1z3152bVJIDao2Ou3nyvnWVrV9LCG/Qss/jS5eEpyJAjJmwLrnfRiqmfvMJpDlDSpH+vrZtAEnKSmPCcOt96P9OCpeUhFiK3WhVa1uxmSQfjdDrgh7XZMxbrjffszKh90ZkQG/NCKLTq3E5wGS4gxS/corn3eCImrxoBj66O6/n/n3dBi6MiiOg0ZYaPuFMvbjB5Ek6a8SPeAGMVmBDh+NOGzD4QNo3F6eSn+d/21S7EQAoOo/hPDRwAa61w77KEUi5chPw9YQUTpVv4YsEs5KZELCeVwmbi1t4ebk6KE3k9cy6+GwblmIcAEUsgpgOA67OBFX7Ac2iWOiZ0B3DQxUuPy4p+QuP7yQ8C/AvJsKM+PsOBen6YlqOcwMfnHnc0RAvU7rKc8wCGqwGvLzR0SpB0JoYhwV8G29poLRd5pnYQwEUIRFnmBWeNgHcQngguC3hqGsTBZTv2TEA/YnHaAwVGGL3OdLXjFTIn97x00wJRcXephNy7U31JOKD7P855XqwIFCaWxVkSgm7CmVwnc7PoVuVhzfVJcJ0BATSPEirq+eD5KLmdWd0v2LZIrXx02K4cZY+hxVfL6cECruOb56eArM/UbBI3Ek1s=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx42f04981-3045-7dbc-7ec1-5185387f1064" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx42f04981-3045-7dbc-7ec1-5185387f1064"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>JWv3RW8t6J4gedmaBK4P4Vs0EbY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QDbvgGQnbTMNBicqpXwZ2LdIwHwFJWTQtlw84DaTxiT01C9NgGDSyR3xbLAd1MD2IvG2y5X0qxDKIPwBvya44HG2MDyZBhulJZFW5C+AcRMVhYUeWUxLDfci3tXJ2Dqs8+FQ7YAtogWbzCT0/iLpPVWZ2TBg4QITouDGnPVagNQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>kr4foXNO7J7Mnf76ekLIljtDVwTjMUnjlNdM2VyhsNFZA+/mPB+JLj4VMF5sgxF0ZtNmyGnkLsNT6C1pwQpTBkl0F/ysjJCNj8ojdxV+fXsJ62CZ1Wo8vCE8WdUjORvnS73TUpNWN1yPjhhrXOMorfkkATgJG8WFnPO82JJdYFc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.