Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxbec70aa2-1f88-81d1-b820-fb9f1ff8673f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbec70aa2-1f88-81d1-b820-fb9f1ff8673f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0HFfTB6ChYL7g4Uybc4mQULMTys=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>uC+8tI0Bhcyi1h3tILbATazkSzXPoS3eixdEFKOLFdM6vkIy01EKrMv13UdWWR9nRhS6e4vbSIxly0CgroNNc1bDOVs+uNN5CsQPXc6BCpPBcccoN4AYUBTIDFtzliGpAWL6FxFRJHo244BEN02o0B8I0NEXsGCQIy2I9W6EehI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxcbe9c962-bc6d-6433-676a-6f62b27a7fb0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxcbe9c962-bc6d-6433-676a-6f62b27a7fb0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>/CT/LeLQqF49aTYqbPUKkmUgDKQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Xld+V9/8MCZXLHXLq0eeincAd3pzMpJJRbGKhvF7DwsaB5EzIRq4M4Uy51PqUwOu3UVgZ6P+zpFNmucZcUoWFh6qO3wMu0ZvKRkGxdvS/lYzqAKr8rhK/ojvOMfwcZD5bgbaJkQJ4LsC9gAS6wM4GZLuY49gqrbD6OXEXc8753Q=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4cd4a098-7be6-770a-c1bf-b75f2369f822" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4cd4a098-7be6-770a-c1bf-b75f2369f822"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>uk3ijM3x5LJJppW4VNWGldZc/pk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BzJxg+Yl2Mq4vNgk8Udpj0DU3f5EH6yHk18/iUueS86wu1cJ5DGUWPA0nOm56Yrr93Sjmde8O37v1D3o1J8Z8AG2PcONds7gkXxMxB1APSv4/D0pFzFRV6ykDKG/dgfujZlTBaS4VZAd3p+zk8vUclgEVpE0jA0mg1ZsTA02dDA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx7cb7f786-69aa-fc78-d9d1-5f76bad47194" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7cb7f786-69aa-fc78-d9d1-5f76bad47194"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>iKQJzjqvMxOpTthRYBSkmKXI9tM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>yY6RC4Hgp5nG93BpO9w0qLJmRIxu99GEVP3SyAWVl9VqB++SQ8tGFz4lkaw67Z4bEbwsyir7sZdwykktrccDYV9f8GZlhydFVl5V+lmLAmWjYOKABF9Sesc1NeGA7TmC0y7soV1fdh3uWkV/jDNfh3ygwShtrvi9OS5Lm0Z07Uc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ZR1gTENWea39tq7JnKPJPsVhugSsQLLO6fH3eQw+0o2WTz4rEVUYyqqw9qIx7E7GAgN8PX/PenjAspW58G4pFwmH2M79Y6AuRiqcZ9zffM8RP90uYlq/YuOtDvVTasMRmqST7y0SGPYbKfDnDpSrk6UUtPjecbtwD7iPHoNN3XY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>d6UF9c1xgOuK2ZJKFv/s7SEtcamDQUVUopER4gc6M4ZB6psHhgLTeU1IoMGMPPXt/UJ5KM1uknAAVz1zePcFSv4Kq6iC2lgxAEDiLX9doSrgjvt5GTMQK/Er6BI4refhwHUeTa6NU9P7zGGZBWIr2xn7B/lVPJvtrY/83U2iOpY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx70160141-8736-429e-c1d5-0d69c0ee5e7c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx70160141-8736-429e-c1d5-0d69c0ee5e7c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>q04l6lt4gHWBnLwJFUSPml56Q2Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>A/1heuI0qNzKazWaTWQjDvpI+Vbg5aNAV+mEqB9NKY3taSpy0r5uRhv+kulARQc7oEL7Z8XUOfi/6J8suixySFhDaftRjUK96q8P7Kn0uIKlixT69wqlMT/EaV760dm7Kdq9jdAcSirBvQc/ObIZRTrYKUbzOh3AabRtU8iPPeU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ZR1gTENWea39tq7JnKPJPsVhugSsQLLO6fH3eQw+0o2WTz4rEVUYyqqw9qIx7E7GAgN8PX/PenjAspW58G4pFwmH2M79Y6AuRiqcZ9zffM8RP90uYlq/YuOtDvVTasMRmqST7y0SGPYbKfDnDpSrk6UUtPjecbtwD7iPHoNN3XY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5cd6c34e-0d12-3d1a-ea19-1680665b9f43" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5cd6c34e-0d12-3d1a-ea19-1680665b9f43"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>iOpmxVsvMR9C4HQv2ymPCYbTlpE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>lgCKFsvjXFD/lU7slGzxBooe0zAoZDiDSH6vPzgwWiXbICqtzjyWDpT7njHgXGWfXKSyvB98yTRvRtBJs8PxyRMs0yyOVZf3Qk8g0dKidhpoa1y51hIWnNKa0Wy1dv71/yEqT7Co2vHBMIMPNNf8C0MSJ8W2LY4mJvLI62r3QYw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>d6UF9c1xgOuK2ZJKFv/s7SEtcamDQUVUopER4gc6M4ZB6psHhgLTeU1IoMGMPPXt/UJ5KM1uknAAVz1zePcFSv4Kq6iC2lgxAEDiLX9doSrgjvt5GTMQK/Er6BI4refhwHUeTa6NU9P7zGGZBWIr2xn7B/lVPJvtrY/83U2iOpY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.