Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx522919db-c7a1-ba92-d406-0aa74f3ca3d1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx522919db-c7a1-ba92-d406-0aa74f3ca3d1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>SmtEOGDNShe/1aNdAlDcgEMmLcw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>czoG/Gu5K2LFC1c1zqE9+bz0bB6DMKWLhbcGr9/sxsDt8A3ox7glw3fmSTsGVMyiJdLV3EloBEbFGGWYLi70yn1h31NdQ9qAV5xhv4BHx8dzuieX0GarrCF8tQeOwyE/xiLXRZa11xVGt3+MwYYH+keRcrMQEjNmtY3DSSAPG3U=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx7932f00f-9a30-5829-905f-b21cc9422d7c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7932f00f-9a30-5829-905f-b21cc9422d7c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>fbBoxy4I1dYiR/o0gwjmOTJROeA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>nl39x5q4yVqBl90COZiPNk3BjlUlUVhJ7BVdCXrdQ626BSl9QlXYUeCT1u8vht9H1BxK1p4+4HtxoMlQRsfjXyE4VSpercqyWaVOI8inv7JmtKNYXquc0lmnLdno8sR8UU4n2otlHmdYGFRfGWjpKtS+AdaWzuRcyTio/2DNTPo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc6fd17dd-7353-a924-19c9-16b04ecd0ccf" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc6fd17dd-7353-a924-19c9-16b04ecd0ccf"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>g/0q91Q8ylO7Xy/ENbhojjFTzE8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JNb+GwHfj/Vhem8NEgEs0f/IpuAx7zBqz+zh/5dlWWnzMVrl1q/rqI39rmm0fXblExepO9mHFtml+ofcAMipoF2PvjwHa5zXmfek+RSwhlpMAjQhO6AMduMpt9qjB29GX89ZG1N1MlJVWp65OZMAte2XnLacewQMccWy8blqVvg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxd2102d0c-5fde-5532-7f9f-d40513fee20e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd2102d0c-5fde-5532-7f9f-d40513fee20e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>hgojk4snOtZFcW4XyqCYMPTwiRI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>HYs3dwsSDR+TkEY3ChlVZ7Tp2GvFvT1IuEw3wbJzCem3l9SSYahfpMa9Ggf8LO9ZyWrRuEQW31RMVSdqd720nOSNRgO2eJGpsEVW/fuaIj1sMiE8Gn68uApnww2obRHOdsdTW5+BH06POfxZry7tSq/b8it44lWfUyqNzJtiiwg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>yThCLX/Glx1Ds0PgodsTi+LfEuTImH6cYx41UP2/QNKNqeR/CXhCGtZNVJMEc83QZlk1sglwi5Hmx8e5nrM1IgQcxbBul/1q8z2rG94WqDSvJ0B9OJEbssD/Bt7t/1kZ3AHvWblDfRZkfe/WkZ1BEWcFCf+EFycy+MKE/F2hBXY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dN2iaEbjL473mIBM6cOmuWHgqw2aoU2J4yK1yGHK0/G0C5dOxJr+RoOg1g3kC6LFqEdXsEvKikwzSANtkat7+1Dr1tpL7m2r8FGzlF2yYYpqM2XaJxg8jLacbGsj4ff1KYJxluYYTmtyGRWu8cz987ssZIpWjRe6D4KFIeC3fkg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx191a28f9-2b33-83ee-f363-d1707a0d6e23" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx191a28f9-2b33-83ee-f363-d1707a0d6e23"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>vn1rwgiavW3o9KZXRoYzYb7j3iQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>LeEEm+9S5HVTCNUXafRiH/9bApZPkB+WzMVm8gOyurseRQ9jGuTKohqPVepuoQUJGuhpkzn7d0T+1qS4fK7CduN4H1V/BB00hhoAECbr/4q+42MenqfpiCK8bVduIdjcsJEhxhvVGnPY9fILCHmfaJmGDEayOp46ExJevIBU2vk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>yThCLX/Glx1Ds0PgodsTi+LfEuTImH6cYx41UP2/QNKNqeR/CXhCGtZNVJMEc83QZlk1sglwi5Hmx8e5nrM1IgQcxbBul/1q8z2rG94WqDSvJ0B9OJEbssD/Bt7t/1kZ3AHvWblDfRZkfe/WkZ1BEWcFCf+EFycy+MKE/F2hBXY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxa2edb930-7da8-3825-344c-a7a91324acd0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa2edb930-7da8-3825-344c-a7a91324acd0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>oLn+vyVjLu+1SvhHGpmy3H8dc1Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ofLUMjxfnNUKWclLgjDsLliizuXqHxtIGHc3YEVF2h+6JDliZsGN3UtxbAeV7keTHTiaJotmQjKDa6DItlRDhVsHiVghJYU1ehV9ZDqSo3g6P+eRT0hFHOmm+4EVR0FE8ic4dk9lZn1x/8a6FMyC+ARzjKU7z9uvjy2wH6aKsdQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dN2iaEbjL473mIBM6cOmuWHgqw2aoU2J4yK1yGHK0/G0C5dOxJr+RoOg1g3kC6LFqEdXsEvKikwzSANtkat7+1Dr1tpL7m2r8FGzlF2yYYpqM2XaJxg8jLacbGsj4ff1KYJxluYYTmtyGRWu8cz987ssZIpWjRe6D4KFIeC3fkg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.