Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx3ecd0866-c625-4165-6fcd-39dc4cbcb3ff" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3ecd0866-c625-4165-6fcd-39dc4cbcb3ff"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0VAAB7VUiOCBQdjhpQeBJefxD4Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>evJVdcN8qZoWPBhg8ajK54xBIjjN4bH81hEyivfOgeyMeFgrocluxTqs8N71vzVMeTDhIuvkNTY01BEvzRVDtFq0lVzmFR4XJI8QARKoDj6/0gmwk2P9SBynIPesRKSAbHENKhPtgIA+xMqyBdvEzFKPbMay8LsUeCxJ+16kK8k=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9fd3885e-c436-ef18-8026-7603045634a6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9fd3885e-c436-ef18-8026-7603045634a6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>7luqoZW1KjRxQvcModOPkCmarYw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>G5wF/hKopgZTy9P0/BNyxm2NYeAgOWLmRintqjpuO4khJBnce3XLxFcFOKZP0v2vER4y8sSITdPeEdx/lfq2ZE33EdFSTaQudsSt09z5ApvpsxAAF8XpUYS5TXhlwHUtSu4JLYBAaCAyiblzva3QzkU/j6RK9Rh/BPS1owJ8uaY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxffdf0412-9939-2974-9167-4cf0d238de37" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxffdf0412-9939-2974-9167-4cf0d238de37"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>W+K23n7q9/Pib788aFmvh9W1PBM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>VREZwzWiiz9mcic4yXBQ3vODp/IDo7bYBZqJ7+H7EJpc8+ThxJX/bhHqsSleo7pjaiP+TqCnQyMtyj1oQZ2jU9xS98dKiK56RqR0HX1MFesd8Un86WltSW6+u+JpdHgs2pdabcNRzcuVc1T7rZAvzERAzPYWXvWshgN9D8E6GqI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx9dc0bf30-0db2-f644-dd27-e2cd92f62051" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9dc0bf30-0db2-f644-dd27-e2cd92f62051"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0+StTobdXd0jFvK3lplVAvN4w+M=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>UB8yYGFvUJXHAZSF/WNEfL5kxP2F9fW6SID5Rh+azch7/yEb49XmJoYqqURXqTK7efVziznxWacY2MnoupwXwZY7eqpfhGVS6hQAbTD3kcydeWG36P8a0meO5MCT+zQnFb+00nIsJT4bpMijpAvn6SE2DaVrLRbzsxc2ixOstqc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>J2sobQpxCutOYo2NFmR9Kz5sa+opy/VRjZO4k0x/fCLgcJY9rc+sJayQ4YQcTXoXUe4IBmh3giF8qewN4ATnJkgZ1Ytn1JwekBam+cGIIbktOjYTKYP4LXUy5cNVMDd5rVi7x0B5hLWS1eDLAndb4bOe9Kb/xMzNHLH7Xx3CXvo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>nbtxC5lWic9jGHcdP6V8yL8kA/++G7UplE6tu7VUNDTI3SViHmuWXrwQ6hZk3vey0rX2uxiWBjQVtA+69aEBDGTNPrzwoFAqYDdH+h0MEgF6OPals6LZ+r6Sk0KPMAs70ii1MUS2Accav+f5rJxRPmR+u+6ZsfywRXqyb9KodwQ=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc68303ec-6a92-efc2-18e1-62649bb98e7c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc68303ec-6a92-efc2-18e1-62649bb98e7c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lxkLwQCKCs8nNzUA/x+53O8Ok0o=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>dx7xrY7jwNHvvEcQy5KmlgiKH9li9GMhygOv/AEeGLycPnFEZPyHKUo762wukIYeo0sTp6i2Wxtx1dicnhm8CsadC4p1k/bHF20GLd5QsDAhaj1InpPjEow428LWOTyNb2BQeh6mlUxJy6H5CrSyw8BFCr6tfjv5AEVv0AAOWjI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>J2sobQpxCutOYo2NFmR9Kz5sa+opy/VRjZO4k0x/fCLgcJY9rc+sJayQ4YQcTXoXUe4IBmh3giF8qewN4ATnJkgZ1Ytn1JwekBam+cGIIbktOjYTKYP4LXUy5cNVMDd5rVi7x0B5hLWS1eDLAndb4bOe9Kb/xMzNHLH7Xx3CXvo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1a82743c-66c1-677f-88f6-55db764e4c2f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1a82743c-66c1-677f-88f6-55db764e4c2f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>sRjnPLpwfTp2nul7jGCsttJQxm4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YQZfU3wSgRlEjoEZnU1+KQbcMMu20VXWfssKruuuxkg05dQjySJRj5y/JTbL2HMB1EVEgnY7XlNCG+HZrWClgyXrS0WhKYRWZaOe4x9yF8hT9Ml942zIJxMxGG6Mdd4o164n5Rj9HJi5mUuD7f93+R4d9vPn6w392eynjDTr4fg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>nbtxC5lWic9jGHcdP6V8yL8kA/++G7UplE6tu7VUNDTI3SViHmuWXrwQ6hZk3vey0rX2uxiWBjQVtA+69aEBDGTNPrzwoFAqYDdH+h0MEgF6OPals6LZ+r6Sk0KPMAs70ii1MUS2Accav+f5rJxRPmR+u+6ZsfywRXqyb9KodwQ=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.