Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxb7f8945b-4a4c-1351-f630-2e45d7c59052" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb7f8945b-4a4c-1351-f630-2e45d7c59052"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>wiMxgZtbpZfI0HUkkyR2FDluJrU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>C1RK0VgzDpuxIBUNaUxqUVxJaywhaoY0rtCdZFu1+6Tr/JN1gR2BjJ97ZUGnlvwhJgvNqrASQObLuTxJpGtZMLoT4Cq7TmdA+m/0rzcbwvJxX24GSzalgPwn/XT2B8jYDRw4USxZpiQR9wcpSikf6uvqDjQKNXydHETiaBxf2ZE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9a118a3d-949b-d1b4-30d9-11a420b269fc" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9a118a3d-949b-d1b4-30d9-11a420b269fc"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>I57oqjWwL90z7H5GHunLZYsg2B0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>0mJ5NLa/QGkhEZF3it2fMWue9KkGw9oYYmjWJE6tYDOEY5kEzMFffuPgwgg2UhrsNblGZwOHipiuTbX5Sw0yuo/bdj5bEJABoxZYEipNeSVAVRRP/zh0UZI4u2wzZ1OmEBdB1MfJG4HY+9weQFNt1YJzSnD0046ssdUiljdjcnA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb447870b-9d23-655c-f026-2dec37aa5851" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb447870b-9d23-655c-f026-2dec37aa5851"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>CSSA61t68HU9Uk27ti2ca2ga2Bk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>LihL4aOjfB1E7O4bd8mtngVkgYYIwqESNPIrv7Nnk3qZHV3p01t526mOMCQSCqcltMeXOY2pvUNPJYw9/45It+HAvuPngOf8KSNIeHnHa7enPe+RvJXtyXRT57ndq06xtQOGgzUyrYQGYE5PcEdV1C6aP62BnR24jrTAkMUY5T0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx78629fe2-dbe6-8f1c-712f-10a28ba26053" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx78629fe2-dbe6-8f1c-712f-10a28ba26053"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>by/iRdkUPfClGkSQksY4GSt7uJc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aWEofbrdpwHd5AZeN9NQpXH1omxuRkudptRfVLFDAF7cmsOMxtOJsNLTBD7gfGelGMRCL9CfsePpiJ6p/SfesU/fLmz43dYjwE0sNH3U/dzDY8nKVNCyFSzpvDCzgTLbbcur26Jh1Cm6UPmLgzeitW38ijnMhI3s/K1pF09O4Jc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Dg5NekRy2rkLvItU0HMaQLHw2AcxRnJIj7f24i/s4W1wHdpUq0bG7ilEIYEgpfm1ojr51Wvl63MDotGUV40T0ECmF9yv898kvGa8+nVyzb6lgDk9WfeSC5Xlvm58YXp8G+o+sjDN2vOYhiidORXWwAx12aqDYppjAnGgpuxZhdY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>06jpqJIXSMm01VoW6LREDE47kdJBrWR/Go4bGFu7xlID8771gIcNaFFzI7N1B/Q5vxeLz47jrWSYHjCiwlqCUWr3TUwSzyQcDY4FNF0pk4vnBc7IFEIQD3XxgZ+IkeeyigzxbUPNrdVr0BC+jq0t5joIe+5TRDceCkpWDd2NTQ382Kwa4i1uICwNhehrJWrcGw5vxe9Fifp1/oFE/AuNGpfw1uiGEyonTyvsaev8VGW/VbfHgIHOZPdRqx5jdBSXTY9lhxqvC3c3KsatvcrBRu/5eQGmK6GgG9ssYNuipQgAM51/oTroR5MPpxtanxBjr8LO7QszyVDfSbgR0MVzx27gMbmbGulzC7W1kUCNhRYEp0KvW7ZmaSN4mfes0PLRnxAWWP7+a0/ADK9C6T3+a2Ad1HMENQBwh+QDu3StcuCUHibBI8GBWrWsxSdBFF96VZ/cU+UbEljNzwvJwbRW8OYd4AbCV+cvftnHC6Lf+1tW1rLFctDcm4+fLr1rtNOpbOvey+SirS7c4JuaasZSvS+/WiBXmp9wFiKP7AvLZNyAmuT6E4Vf8UoN4HHDq4Y1ZWzAUPIrY8dGw9eDGBKwyW6Tfmd4wbzhLnVg4Xx2+Z4Q02YogUjZjjsYDBCv+FH4ZXcSwhKBttc41eoHFC/roJpz8BbB73JrIKOwoW2QZWQar0YGbR9wQDX0ZjpUk5zjS3rM9ngqcqQTBBP2uWpvhSr5DzVStt0H0lQyRYachjDe+s5z8RnAmbvlLkRWd8NNP5lafm2nm1IzxPGuZ/24Jw9Lx7/7kLlsrKseEtkhKvT+nhLVmH1we6iYLYOiiis+P2BIxF/zeePsql41nTyqQq6nXj8GfW1YXsHnjQuZeBbHdThIjCFiU1i7LkQjY2nwW7YTdND/5wgMJLz/LYEPQ0yRbMh5uLoapaBJXHBfI8tJwqA6CA5gfASvdwGMyaAUYLjkAv3b+cGe8q+YHMX329iWwfTwdrJkbyeT9uXmIm889GWJbYO5dcqc2FBcVWf5fv0k8Bba92suYQTyblT3AVE54QF5lPW0wROKaHM02tCFbtuRKnS84LQeBck8jYQaVzPcKvMez1J41naEvvd8Z0SpTGW4gYgLAHaVSJyNCYFTU0fqRiipl3Pf5uMZ2zhqeUqpFxnaroNiwxIoUnNAt0oku6QnMm9dyEdEuL7q+vW3/+mB/2YS3vLFgsNdNKD+repNhpN1tAuza/pWfHtV1Blh1ztVzj+O9/+MhSbPbSYa1CSbuKv8gYBRAiMgw5Dn8WsASLfQONLQ/fiBrTcsk2t/8IZ8pUeL3C+TDHNmkvWoCVVXHVkWFNjOOzf5dd4p4i5Tm0B0tWAg/i91YHvdQJVh2iTPGW5XeDbdmPmwXOORg5d9ynzGt6dWcPRfaU9AvWqD+03bSbW3XZEi2qofoIWoAmRrFUQssFQ1DFNVdGkHU7DCIPD1upeOJJUj3qVDP7gtmJQDQNZ/E7MAFwzMl0it5VcqvEroEzCeGD/fJklo3bvci1rR+/5iSB8kXgkEcZH4c6lSE5f8BHL1vZvtY8dz+LnaGiJb8eSDoSfn1QGuSamatbQCwvH61g9PrwEvrGi69d5g0DRlPaTfsjcLR2rE/3JZCey8y32ar3sWs+fNUBvGHOm81A2wQwPOTmKb0FBFTYCjdveZfnGy/HRdB+zipehDXqIhVmJG8tj+D5Wm7fY9VAJ9b4Bp70HaNYCM8JjDLgSN/Y/lepA3ulbmjIfa68DN8QCB5Yv/syJFXTINITvb1dhH9qoYK3BSCq4YpErhXWpfGVy+S78+UEDLJDq9c4vU9BPbgTvHfI6D4Gc4Hex+SRysp530T9QpF3o/JVqP02WUMji+51Tntkyh2JVXZc/kd/1sF4PGSFpWQjovCQXXv3H9WkgVyMB/3pCRpkMcjyl+eXxblVfklc0XQUQ7kfRUHRxjCB7OyKJMLhj9PClRIL7+TcRAjiLXlxC39dDWVBW/T5icRjubFj6d5vN8nlgMEcPIOOJbvP9nXcmaLwk8TaLJIvaTMw0sBPJmaLIi4/y78+MjvgJPvzLDaluLIZMmIJlYASwu/ht/Zq1xr2oFJLXqqRtv17XFwIYoUazUpm9aLCEwaxrJvIKvZ+Tl1ScJRw2Ty751PPdiEBPH/SUKDDCv5BFgByMUVJUgEucF915xBfTodkgDBVNjvr9/VTVnWZqQVg4z7tHJgq38cVNVyVuS9MClurqNmL3ox0bYBxx1vDWbo+AuEH1MaH1UN/YlRnMM8PauY6PNd/4kxOFq1SH/OcNZkxWZT3/aN6erXWUfL6iNVUbvc5inDcM8k3BDZLnz+Ojb35XjBSe0EQYd4/p5/ZyF1fRk0fzFqU7r9+2mCpilT2/5Od3oGyNXrbBWM2EkeGfiiHDwudR9tQevbfH8Plooke3/+Gv5B63Jg2/G0ocwvj4cE9MRlB13Jsp0LfWOM8YU+nGBhw2MUEXWkabPyXLCExNdMxGgDYjMFqZonZK48i4XiIHCBXMwqlGU35zLxAX0cDAMI2p/a9gVIUa19/yitoYIkbTrzlOrvk+zQYJiIEE5YV8V3UqRE2m31zLxQ/6yMwaUxP4VBaZ/SLvWgW8KipMheIQmAsaIuIg7qErNUNqa2VdqSMQ4ov1QshKuB/QzvYONnD0Yq+t4pGe7ms/dWXWVXJSGbBbzsuG4vbRE3Sq+btghqNy8TmmXd8aJFR46WgY5YvPbmqKJtxp26kdSR56a4EGRl+OSLQZe7Ysf/wJO1t9XAKcXaA/T1idOj/sEbN1cVWiFld23cvysGQn3i4msNO17zUjZPK2zAOm3MP5umkqLyqZzYGnsrBuQERbeados/DOsFEFlX7YadxIZs/Tb+q4vpmKNPrMs5gFimuyBu8a+++c6+f2d1hT5C0tJsvLfJQU=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dLfPQBobZ9PjN8oL9aaVJhPHEIkDGlFTyR5WOIFMbMRzXaboiGTVpQVFS5lNxVQwoj4DAcwuhdcUymd+VKxfoe2jKKJgZHYUScLqALOHLUBZ1J7o46T/fxAXRBSejyU414X8OAIDF2jzDK7P/uw752XBcG9qzTJZOlJBQeZzeg4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbace5ea6-4a43-e920-b33c-34d1f8724d6c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbace5ea6-4a43-e920-b33c-34d1f8724d6c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0cax6TenVkgckEtth0wIyBMPeNI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>EJ85qjEb53bXIWfpZlumQN8izTwiY5FZWZwM2BbqI2gszepMLSLf1Gm4DhjZgRPL/X1JcRNlGo4vxrajkPa99ttw4liSfUsNzEdIX5DxYCCNSzUUl2k4XOzUCfH9sE4m/QyL0CMs8L/3oABY7EPNZQfid6nIZt7hvtFikZrmv9M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Dg5NekRy2rkLvItU0HMaQLHw2AcxRnJIj7f24i/s4W1wHdpUq0bG7ilEIYEgpfm1ojr51Wvl63MDotGUV40T0ECmF9yv898kvGa8+nVyzb6lgDk9WfeSC5Xlvm58YXp8G+o+sjDN2vOYhiidORXWwAx12aqDYppjAnGgpuxZhdY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbb25a78f-d43a-00f2-2633-15f52adb9b62" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbb25a78f-d43a-00f2-2633-15f52adb9b62"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>CRmtFAitPs+4ZYA9tdy2jh0P88o=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>M0WOZJNiCtlxrXyFGIaWPQfUM1DaVm2yX6inHACOxP/eG451VZAl5RZhkVPMcTt4HVP8WtMFWXRklDdqoNjmfEJFFFk7heOv2KlJkaDNnQmk2FnXHcDl9UO4P/eWhT0dvs16JR6eshJnBdiudkZpp1SIcxnf04IKTWgxv+DKEhk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dLfPQBobZ9PjN8oL9aaVJhPHEIkDGlFTyR5WOIFMbMRzXaboiGTVpQVFS5lNxVQwoj4DAcwuhdcUymd+VKxfoe2jKKJgZHYUScLqALOHLUBZ1J7o46T/fxAXRBSejyU414X8OAIDF2jzDK7P/uw752XBcG9qzTJZOlJBQeZzeg4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.