Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxa743b149-5c41-5a52-4191-2901779b61f8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa743b149-5c41-5a52-4191-2901779b61f8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+WrW4bliMxonzQNbVX/V22/ipoM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Nn1XJAZrmzqW5EHJNFfYZ/V/oORHfwBp0mxoQ6khW1G22YMS7FduxilNf+nXRHeC/cjGiXyi//jTRPw83TWx1kWEr1fZSy/saZBuZi4YkYtEYun97dMLnTmmqbcPyjvdEFppNCOVbNZ3zU5p26FEEb6ORDV/qC4o3WnF2Ulx6+Y=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd7c15fda-e60e-c637-d39f-ca26d0fcfa48" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd7c15fda-e60e-c637-d39f-ca26d0fcfa48"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>HsTlXuQJouzRo29ODry0nczMK2Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>jLJLA6xiHD/X57Z019HHwtji847vFJo33+5YIJDENMJqJZQUxN2ltdnK+zjmzJU/cVBDRRg2L6pN+O2DJ9cAkm6LIu4+i2YD/vqKcVHCAM7o/W/l5h6Je9iWV7gke1tShl4dt4skIPQDnV9rKZUvRmaHWz9Gh2/daLxU55hE10s=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1c777494-368d-98c3-bfc3-2e66f116db00" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1c777494-368d-98c3-bfc3-2e66f116db00"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>nVOL2klm9GN4z+3MDjOSLdySzio=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>KYXkIULzkM4lKRxHY6k4cY01XRm243ceeDmBKWXHO+RG5IQf/tVVad/a+nDv940bKM2KnhFDJfwzZxEkEmmNgvP+rpy+THol0SWUTQWvo4ohREYTmJXPn551hSokpclK4wmRzD9Bw48F/nq6eTAd+j3OkdT/2xvwmWbk3ByhPUw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx32336acf-5dc2-bdb3-bf4e-6e4cff701bf9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx32336acf-5dc2-bdb3-bf4e-6e4cff701bf9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>7lqn/J+hlAfmaqWnMuRACjNLYQU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YPYKh3nBwcvrK4AqLZKCjNWYmtZu9q3jSvL6iakvbgXBMIWcdimD0arfwBabNX0J2wUC8Do1Iv9SEV1Rzrs95USzjk2QyKtBi+ZyB9IL18YtYLCNB4fYNoGitnhANFdJmG5dg9wjC6YgGe9JVxgYQHSBM+iOsXbpEiFTE3cPlkg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>rcO1brY+Exe8/vXOajMDaahriTx/tepQjDujVZRgvWhG2aKVOY4oZgIqt3/A22cX2cSwB33ysUiwFofdw51P6keLQw7MqHoa3Tul0q0w6vfc5JEpAN536nJxrTCOULxGSypZCMiisbFUDHezcPbeJbdseYkxD/RwDdZaSHgVid8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>b1UQpwnubuNsxLrMisL7tQLiyTVU/5X0fe+NquPbF5kf0cJA3foY0qgZd0pBtpKiycTIVAkz7/WiUUI8jOMgJNRuu6bDgO9t0O6prJ+uy+4VBjiekPjEm0C3+TJP8RZlLAnYBG/ub9QMTF4yxumpDUeYF/2/br0hRBgb4KVy4iw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>YqtWcUuqWXL1LgWjgkHi508CXRLQdOKoJ7fQN9FGlgbCDQBSdK+74aZpjSQhaTYGqr1yag0iR0HPtNwZ9ZfiQDy4N/vFtSqsb4fPJBfNOSiAMmmB5X60lSBt8/Q5cDh+lYes9ZvtQmPsOIGaKo90RzNCSduv+kRxB2Fm9nzW7Wh79XZLaOvCCF/5bDsA8hK1TGP4anQ3kZESXSbPuvGYzeDz94/lt7vmPHKUNVlw5IOLvIePKh8opjxRz6GJ5LTlELFHOLN8qt+fEmxvv3tqNFHjLJiwj60rHoOjWvST15jC4cySpI831XTvRdSey1cjXtGnwxSnhQgZc82jdqHEcud6Y4Fl+D9tw8U4UFQ6CQtm033puIsm+pA0tftbi7j/qk7tcBZJTaOwLmoVNObD4YYzj7NnQ8U4Qb9eVt/PPtzE8/rWq9H3D8jCi1Os+Z1JMHrCw3/1gL+dQ1CyNEVTHDBPUxQrSKfLB+aRCUOHTwqv22yiSrrBDix8Rr2zmtDQyerM822yeVbHebgIuxbHYSQ1lx/F5OFxaovafK0EpdJpKPVFq/SEDmtVkRIX8wc0EW0Jn5kBI3Cd+Ug0hd9OBrZtEdTNS+M3JF0U0qp8H055L8niN5zuNcNlDmjflo5bTk4tk6atqRCzHq+rinF9AfN2IBba+7i7LUrB1VNgK7FS/yp3litBnpXEWc5JVP17x2A3bhZuEJxC7cO6jWFiAGlA+Hi3Hsyi+5I1ixcxmWodidO4zdmS/1MkcG7ip8NVPL2OJHHEEQdcnq5D4sehbLTj6tXP9HqSBK+vgJBmuZ/R1pDJiZTlfNyTqaCi2Z8VogQ7wy76xP/h1XKdqMx4ArOl9RGj2yfcp7y3bgHZn6bH6KlXts3EtXmwqNS9JU8MY7H0WUnY1aa6VHLkTf0MdIU+wwEar2ts4Z1kTho2wL/g8jHWviW7J/YbY4HQlLhXZKq0Bu1GmoplGokWmvvkTMQWz0KNG/0Ijx4tjN8hzpXZH88B5c0kFfznHIlXT5n3K1YZlltJi1MWrd7jWOdZzk5QLjF5SSBut6l6gO0nQhlhrqaJV6wOBydUMemM9YiTuOaHpjoqxZSjYr+0y5ZP0vAMmHqOiioLyNFMuLGxlJC303LwCLdkpPK4F6YlkZ4VKw32d66oLZaK0YMMTl1iKfHrxZ8/vT5of5A5akUcFlG40Lb84q34gL2RFSE8clMEXCwmLe3t6dXSYsZP0PLiOYIQE8VF6enLWddHJxF65OZuhs5lvm6oZZJSFkg6OYmyLw+uA/YeOoNpQ85XImgsbWrTxsvbuFImt+1KqVmv/2iLwePFKYj9GXxGZRt9kX+0ioRzboxQuLHlDEx6Hs0k4LIfzRjToC8W/OWj7ZmKqYt0uhMaMEtFIislH1ODBzfP4nSe+qOBwCqZpazKKgQjBtKgVYFqRjsIZbXCLRloSzBJlmiPOAEoePOZmMfMVxg3oG3QSe2BMj5ncU6lvJi4GUfuhPiZj0CGI12yFBEVxS1+F6qG3WLtmzuIYigTvdr3FrJPRo5Y2soMMa7yfh2mTvP0gv9hjbrNr1A/q/4aC52tNAx6NAFfCZT5r5CxitizwzzxLhIgl62FEvWHDKklvKbMEFu1assiQ0KzS9x76rK85MerIuUkz+5MSfGpSkXuxZrrjRo3HLlihcNGvV8LxfODfq/n+/4dpPjvTErAc2DGZ2cNsb2wmPIbfrNbUcIsAPny7OZwf6PQZd7OFWGxuP8Znk4Eys2spqaXr/NvRPyMR3oHSismrjIhnbGj80B7FuWjf3bc7kuUJOuqbvVwZhm9ti5+uE7u4yMy4muFA+7bwOPSpF999Lb6jkwTBE60Jy3csHe/C9nLt/l/ziTeOO3LEYp8MfYAfvsu7FhiSuNyAam2ghSkr+44UOsjkaPXvl7a4wQSAJVAyOc+GA01VtpYBEWJ9qoKcyTWGDmqDTzWqfFvqeMbk7KXLQWuIrBpr4UhwVoJVDN5w15qlhvTkUitk2nDIyq4/42RZZ+krWvQ46pnkHrjMn+cgHSfDZjLHWe3GvvDJalt5rUpky0oCcr9+Lfot+JzglPQGev+/PAfTjiIAQ4PFSc9ZqE9Z9UESRtP1CF9PAsldxdYohy/4OMYQSPo4MsRDBU99TuV/3rcBkF3pyAYRzleNtHRIHJOskW1bgUkg6CGABd7Z/YG2NDTmUBXh/+8zW1Y7HJyTn0NdzDoGzrjkcphlEp0vKE6O7+aA9IiBIdNaqi3mV4LCt9GGG9FhJcFb/ZMqUeO6iIgMazTSyLiQIwM0WLU1woiM8FJI7smjXY2GGbz/tHUR3EXKQsqhBcxRYK3mal2VZqEsSBeYg4HAUzrzYwUUivgSzjY1gsZhN9GKtNgWC5yqL3FY3FsYnJphCttAQ1M8h3MnHm3lFsblgDVcEt4/bf1e9oHFXps6DkQM+0cWp+59Z6BBxLG8c/dnIIFaX1yruMeuQxTYRnT3s5SZKTamNMz5cDbn1f0NhssQRtL0YSFebScz204KrkMXvs5ryp4HRWnRNJAVJkkxwWE1dI/Uf4eIqriFIdKhIpDy9CfOMBIY0EySDX2mRydl95qqMJnWFZb9zXONa8BueCdsS1Y78VK+/8dPhzh6D7HPgrV7rkdQp44VshcJkgQ19DwYk2vLH68Tf4yvQDu985kFBNYnu58F0nOtDUlwE/+Pqv6jTKNRAhiIyRF1mm8xZol99HgO2mqx0wv9T/fFsPyfz79pa00hCy7fAjNdBiYxrXMA2/CcTM45avPCCIXEM9oNaNanrt5KwIiLls6rrersXWSXTh6wWBHzIqMJRYGO3jq51pfa049TGLlChiRmlxstyt/2eHdtevcc5RAZO7QosAr7aWpolPBCCqZ5fM6wMVmOf9xq7Mt9b/PWkjP2M5cD0JxcBuyS9LuB/Q18qvAuSsOUGQtPAYkyzf0ZuGa6p39lzRr5g3u9/GNk8iaosoI5QMAZSwgRD2R4XxIkpNEn6rtjWaGMi8rd/MDeyDZNDX3HVgpwNjVpy6sh5KSikL0Tpah0NyC6YTcRgRADQiORkTn97Yn+tj1LewHEbjDs8yM1NkDNNMj95TIv8bcDTcRMsxxu3JCsfvLY+F5VTeZ3Ysk9S2kje8asLKHgIo/uUiUfevnJXOHTUYNmmu7/Tnzw4aJ7ia3pnYtHuWQF/kkxtIwpibc3/shmQSIYhyneAc7QJWyjRipVsF5KZjNkjD36PM7/Ww5puxyHkY2+ltaK1XMdrls1txiBZCQlgHHcLIrubalXOSaBOWat38nrG4P/xR67CX5n5R30745tYYi31j1PCJuXumLR9KVtGPIABQ2OZkdrmlM9ERTSEJfuRVSjscmF0HdUa+AEZAQYcDFNboZZa0D0nTuNLmnzXzCDTxLvyHw27ziJvPFiUYCfquQhp4P0LWpdvq9NsAjfKIw8ss2Ym4XJpKihh0NjDviWLodPIGE6MqfDcvcTzyD62CBjsGStfvWMouHGW3r8LKDnErTCw3TD6OzCZzbxfWcx1Er2r5AAajlRLPN/KtCJAEWsE1/DajnLUNfzYlHqIZGoP5qx2I8XZTbIaDozbzcBY4cVnpcamKB5HL2T8n8qkZMUoXsizHzO6ASzwa+5KMtcgE0nBjuYQ4qIcmYIjQnDnebAcOjoWmrOPke/sqhxaifXtZt+KUqAysvRC7qH5JXa2nmUAIYQWfhkRew/LsKdXxRQrEFfzfNpbs4b0irPvtMlLzVQr0eu2Le0SrxiOHw5lOVM9f6xEU8y/xP3Gj3cXErw3p930BaZFW3Jcz1vm20sOG7t09QU7JjT5BcMHfoKLmE+WnFXnzUSij5SLP57wmf1/Cgayd/bAzYGrY0ku2knqe7tXvO+NyzhlSN3NFKf5Ysy4RpoLWv2KvSu1XOaClajIyAc8mdH6VQO0fK/g2hWS0f5aIsoUd0EPP9dmyNTmoY27ktSCw7IysWQk9hPpAF8PzN1uH98w5rBm6bvfaBJmrwnrk7oTzvsTwQSa/aRzZJcMCD5+C9pxsAl1gajrsLPUAWkKZobgaX4sRVLogvyyk0wmXK11YQUEy2J1NjyFLmj2C1xukZ7YHsies4Nt4D/j7t54DhuHYhQdcXJojK+tfsokUAAI4clJdPbxvDMiOBLEJMt/LcMNx0qdD4HcrADpGHmIHSe2+8pvTWTO3Pf7Ue5C82P6gaIwK4YwMEsw8LL6bVVtUgr+zjGPsnoxiS9216yNcTlIjZWOlcKXqetNjlw8NHoebg059RYyHw5m6aiXpLELY4Hb/u1cQJmw+k7HoIjSoE0vUapzEoXhOQIZz51XSNZ2ofvwGVuABioc/KSXBPc08YEx8s6ZL0SKqzHhMVI+I9naSHFY+vm0bGTW3ug2io+4Fo26dfI5LAakczfwCePc9y7ALvk8oyRMvpRsOmdveQOgOMPxQJDRbVai3RMBuKdBy2wszQuRLfoMLAH5+HMu12nq2rgfBrgZPLkPWPuUYTFoaRhVYIckAmppIUyXzYaBqrCnQ6SrV+ndNL0oo0lCd3F1/LiHCpN4lWd8Q7q9WraRZ5AzHzU/vZFITmYUBk4zYnUZ3ObvfMBwY0IwlS0SMiPI4SBbDcR9Uzd/I5/vOGRhjzclQv+NyCaRAMiMYUA3jsu6ZPj7UGasZCgAxBOupfwI4ULYpHN714sfDG3gYCqIVerQzVj3Ad7lm+zHcCnFTByjghrKPGdZwmA1jyGWMHaDgUF/cL8j4aECUv5hgFhJBISlFYEpYYcgpKpc4TuCUyo4eJv1QgxhCnt752QusCnIZCQn1vyNcmcc64am8Y2YUiYBd0dN4MMjmf2pCmbNcD8M5mT+Aq8pBw6Lz2nivj2AU/eYUMrJ72IlFv9qb2lzt0bhpk2LIUh/rNro/m8R0aP2A8jSBhvh99TnXtZx8RRxFuJ4bzBSFoWKSZFUA8iebzI3Kotv8rrgwtH3b4tgMcDhU+I3FHbp3bf/vREZSgCXlusQBhlHguvLpLTOGNhrgLfMxOc8PAJG1ikkFR5QlQkU7t1GUJBA7wKCUi55H8nkYacKFmFPRYd92hfXZBywcFzqM4jf3+lgC1zPj0sNd69HDcO1SsnZj17mnX4SuJkWLQV0N5rNo6Ks1TMqkHS3N7hnvbHcYIwLWseyflxf7w4N/dpcyWfiqwyUZpwq2jtgYPedrT+LXAga9PoRR2f7H5BjaPywyuCtksXF9grhFkmZ4/tpOJqL9rJgiYmuA5XGdMb6ElzSklOVHdM0UP0QPjvkAyQJX+Pvjq4bycMrsUl/8EFOqGQ+7vDvPBoee5irRRkIJ3iu4qweGX82GWlG3k+VPmGA8y0LFLB88lEHRPY3I0Ut8NV8ov6Q3xfTTT/uMAEOKVWnT1uJNXCGF39S7kqmZNFzt1gDvebTLaPTL+aWZEzJ0/6fWPmNdnV09UcCoKtIE4Xl/JukbSWxmM9k+N31pkrkUnmrWKZCs=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf937b92b-d0e5-c216-7b5f-474ba81021e2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf937b92b-d0e5-c216-7b5f-474ba81021e2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>91HjA9hSwF4tgi/qVVpRiZfRvxo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rnzWAMip8xLKugG9acJu0iX0FxtN1pgxkMh4azATuY8qWI4at7yelBFMqKAboryZXSQ+F80E06qyDfDqp8+UEgSjxDWgK3eSUbfnqS1X/7VoCy7UEHMvwPN9G8K6nfhVHNT6fmMKF6mEcZ6rqL93n6cDF0jEHGCYFNmbG3bpNvs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>rcO1brY+Exe8/vXOajMDaahriTx/tepQjDujVZRgvWhG2aKVOY4oZgIqt3/A22cX2cSwB33ysUiwFofdw51P6keLQw7MqHoa3Tul0q0w6vfc5JEpAN536nJxrTCOULxGSypZCMiisbFUDHezcPbeJbdseYkxD/RwDdZaSHgVid8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx6b0cfd2b-d12f-36b8-6e94-bc1732f5f6cd" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6b0cfd2b-d12f-36b8-6e94-bc1732f5f6cd"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6NAKHNNYJEqa03dsg6WeoGR136s=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Lh2jGj9YeXYok2EPb7OPtP8rrVqIHAT5ZP24WoZUIbw53od8G1ihrVXMMc4LgiBgYbpaLUiulwH8vEXfQJ8SEbfETdoGsTDkUB+NiFvfSKwajGqFWNpKAymT/ljAp0s45eS/GnDRGdeBzEMR6O+8IARhUfI4GiuuDzJCrb0ygWA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>b1UQpwnubuNsxLrMisL7tQLiyTVU/5X0fe+NquPbF5kf0cJA3foY0qgZd0pBtpKiycTIVAkz7/WiUUI8jOMgJNRuu6bDgO9t0O6prJ+uy+4VBjiekPjEm0C3+TJP8RZlLAnYBG/ub9QMTF4yxumpDUeYF/2/br0hRBgb4KVy4iw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.