Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx5866013b-c5b6-90e0-eb9a-e32ab43cd3c7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5866013b-c5b6-90e0-eb9a-e32ab43cd3c7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0Sm1qLZJ41yMh7SeEW2ZMMZ9In4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>TQFqG9tBIqWAAEsBuM4rYyPMr1jpYq3LhuG8DZjzbZE7V1XYsdYBRrFDas2jhFhN4ZevxVZPDLeHLOVMOt4FkoMcLPOU9LHG1NxjjseXZuBP4ophB18KkGP7kt1OktCKqmn0C2C+GLc6XfyU5caQAgI12bdYZ6Ol7Fh1rrlcbuE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd364cdec-bc30-d1ac-e973-a6fa44cec362" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd364cdec-bc30-d1ac-e973-a6fa44cec362"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+tWjHyJb/A+j6A7DWHvdR1u2kxg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aXdQsM6w3F84hL2/A4iJdms5h4euh8KB5jGo0+8hACwUIPWlX5JreL5s9kZYJpT8yCKKJ2TlY+NxEvKAUCOH6QsEY7akcsgUDdxRol8n+nEwTUo/WhH3A8aone96GYgeOwAE3E41+rzhq9pZ3Vqc0F7S10XKqZ788+k0RLGvrHY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxeda8d3cb-78c8-a96e-4f6d-729a676fdffd" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxeda8d3cb-78c8-a96e-4f6d-729a676fdffd"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>7boKPQ4csILJmpGWdf/FkDDjx5E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>OsZ7e7xUkP4plwKS88zwUSWwiw0Xn95zjAPjhVST4tffQ7DtwHZGOtPKduJ+Wy8WTLPLA6EzKSrm20rFBS5ovEDx75/bsjlDpUUXmhoh+1I5koZxcshnU5NU3hr3WFA4Zk0ynXLZarlBzAagolJJ0cek7ohJ1isoc6dwVC1aKcM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx66fceccf-1d9a-4e3c-c143-0008cfc55a62" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx66fceccf-1d9a-4e3c-c143-0008cfc55a62"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RhY9YWAtJSpfM7aa376uhSQ8DIY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>1aSYJjrXm72vFPcspe5o4q8aemrcG4/33UfFsXsZYjC824A3sEa9RHWN99/U/+Fq+dX3TnT6SZXC28KSxI7ZJmg0Atagkp62f9qL1MC58DNp7zhjg2whKSzXeE41/3kroMT0NGcTGX/7979vkAO+nrTJaBUtazGSXHo+y1oLCk0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ztzzG7vVMS1yhrkT7ePEEQEzAV36DaSmnYHwx3wjYKl829tLEgbI/kOzv19AFAmxqq2BaC/wvLK0S4WWSNlvHN1wR5Pjjw+aI57hLJWwRsZPiTAKpkOadOsZKgu5LYva4cu3t7/1KMODY0gwkSPwLQA5In1RfKt3QWqcq32MqY8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>LUY4KusHTZJh8rL0oTehQxJRQiEbLAzq+/Zsby8VuQ/qafJAZ8MfLR9QqVLgpH46P1VuX6xc1hqMHlHWvVG9e0/bm17RxuIshqWhHAiqGUMyy3xHOdM/gSNlj3C0mnHAu76tppKEuBjbt6anI70yt4dtF/81lO3nMGX6BB4SanY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx49433625-3ac7-75f4-b3b1-966c11f19ea0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx49433625-3ac7-75f4-b3b1-966c11f19ea0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>V3drTZ22WUOgM/HRgqrd8giAWeI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kRZeCHDIUpRWmnq74cVgxCiS5kLTdnDdxzc1gFwYMUWYTUkfnaZ8qjWtZcoERbJ1yDLZKd/mm3Q3wINqN7vU5OXlyetDU1aoEtiQ4HQ8HHIdy3khI92MDs1GhpZWOn/1m2ZLGWDNbfW1mTz9iVPZDbeFgUjxZqczDt38t9Bs+Mc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ztzzG7vVMS1yhrkT7ePEEQEzAV36DaSmnYHwx3wjYKl829tLEgbI/kOzv19AFAmxqq2BaC/wvLK0S4WWSNlvHN1wR5Pjjw+aI57hLJWwRsZPiTAKpkOadOsZKgu5LYva4cu3t7/1KMODY0gwkSPwLQA5In1RfKt3QWqcq32MqY8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxca614522-a521-25a5-7740-8a91a0839f05" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxca614522-a521-25a5-7740-8a91a0839f05"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>DXWq2AqGyYEWmGkyJT0BTNm+oCQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>DqcnKuwpoErxgiQ+jZEfvqQofr6X2Ip9jC7gKuIkKEn1ptLnmTkQJoI8Tr745PiGxDVRme3xMjI2e/tkkYH3tqdMufzXM16USw0Q3hzXyKQ38U7hyV7gfd+t0H/tEU3iYMznxDS8I25uptgGKqNUIyfbT5r/hxmXMSIYS7AqGGQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>LUY4KusHTZJh8rL0oTehQxJRQiEbLAzq+/Zsby8VuQ/qafJAZ8MfLR9QqVLgpH46P1VuX6xc1hqMHlHWvVG9e0/bm17RxuIshqWhHAiqGUMyy3xHOdM/gSNlj3C0mnHAu76tppKEuBjbt6anI70yt4dtF/81lO3nMGX6BB4SanY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.