Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx5e272a0f-7b7d-6b36-f2f7-b90fd19ac4aa" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5e272a0f-7b7d-6b36-f2f7-b90fd19ac4aa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>tBEKvshnsLDPpjPKyldhOUbSjd8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>q7oAaWEXHmumevvuXI+2i8OHaGu7BUGlvx5UaZqqA4+gwODJrEmaxQc/8IOK61CC4M3m/gipVcdPofE6vO74G2SrfVjKAxT0LLMiY+mrzgG6JJaSjG6CxQf6MdWF7x7Ifyzr2OK32/Ncu3W9WCATyhRhdaSyYtLgKwsabSOxSDM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx78170af2-cb42-3b1b-47a4-01efa6a9372c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx78170af2-cb42-3b1b-47a4-01efa6a9372c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>QtPb5PQUz38+niidMGIT9RGIeLs=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>f17yvCJotjoCl0TPsLcvOZoS68z5IxISsnvo8mrzgDAl3oweTvUQIyF9hleqg/yTkJ0FQJUW0IxxwqRUfY+VeP452jVaXzGOTT/NVaNT77gVg+UcmTr29hH7eFhhG4GI03PjCOXqcqzJGJ5piMt3ZGtSObEfmS8f4V1aYVFK3p8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3479ba1e-ac02-f3f6-d95a-110fad3f5097" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3479ba1e-ac02-f3f6-d95a-110fad3f5097"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>v8cLsSWqvWIC/s5obh5erBJTPW8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Nkuat11dO6fR7tOVNWb3vVC/hZ3U4QhRFwkbwai5t6Hksxxj7Yb0WJCwrzgvw1OPJxrRmPGgz9yUTm1F9r68EncdMiTbFmSqdRYYWwzeDw05f1I3XAk5ZZwiYYi+zuFnSBpEwenidJ5llpElAZIxHZLfqHV8P/lR0t2iUkv1fNw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxf75731aa-7ff3-8579-ec40-c2de91c60d83" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf75731aa-7ff3-8579-ec40-c2de91c60d83"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>NtMHm0/ASihCdUdsuZYE7laYMIc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>dDMKjwJw29a+pTCLAJyxIIDXguqlZg8jc61+BFHsqiZ8bG4FZGjCORApPhIwg+fhflxeDGzyF78iBFSylDoKB0fylqq8mjqSW7bRDbJ4kOe1ThWi0TtGIThSzg2v84bueV+IjbCad3ibC5QZuwaXPXiODlgs3nMEn+fjqeyOQ9Y=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Hzj93p0eb3QkAMCAWAwUCrn2WlN/A2bVZGVpfGmu9KsO2yW9Ie8ZpO0eojzjLfuRAUs96gfPoLCStd0+KdmuK2CrkyyVPtSBWaG3/z1vKBruFcDIJiZpLHL57Biz3jmVuiKfUr833gIvO1P4++8l8dM46TxXvtScqbSVygaSYbw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>U5ubr1nGo+rjNhuX1YorxHzPW2DapV1r7ULDTud3NGBQ0e+u8ZWj42YAy6nUxLVJr2s3auLCobjMuvtSPi4iydvfmeOkSzmn+RHOe0aPqxZcTbiwZcd42MVAAxofdVqXibGj0JkW0IeYoOUZf9HN6eXapAMm1raD/avFxbw/0ULBwFFv+GN/knL76yK6uzyCjMNl6hmQz3uZcBvk+5PaaSpA5Ubpz9xWpCoYG4RHRQG14oCHjb1ZXbIGIg8b24X7qwROIRmI7o8qXwPI2xxfSfoWxoL7UqBdZlTKq+zSFi7y9DiwGkns5MJrx1qXG+pFwQMabEZib+qA1vikqj2gUUs659C1WTWuaVMkaNHHfdyT93HeAhCnhNAPr8Ou2rd6gK50agDyDLmV3+RaNWQvMnIJBhUjE+OOPeeJ2e6EQK6lUdurYg8zJ0VgDfkm4TrXpCQ7xui2ND44GUP8bOssnblD9AJWmZ5UXe7+cvA2ZCH6L0Tbd9KbllA6TK9jRBjPA39wVsR7VYVKKHdhHc5b/G9C567/90n/GCX9qMHMDgiFPRZYvhbBH3Mq+5gZkL6HPSPeuuqWbfVTuuHL98R4rU81AKyulvoryAwuG/loK7g6LsZ88n5BwzRJIh29YgEb0d6gCsm+/zncYTo7nJvV6tcwT3LAXHtKbx297XkBQSpOoSnm7tEUyBH5L8UhIEAlE7K4Ndy6QKt4l0AsJQCvbvhLMEl2GLYEEkgAYyyZXXozSotbRvmFTxh8DnzWI+i6WZ8Y6r5J5FX5nb+R/pbOXCz106Sy4j7NddAP0RTlHjMlq+aeyK5Kqj46zNFO4GRNb9+ZkgnX3+fCBG8NqC+Yxeq1enUWjJhWrfmvj215jHPobq8f3LbHgg7RyTrnl/vVbgfWxtIw+RQJomgVvK6HpsKZYcgUYC56bFYtI/KGKVQxd1lKIxIRO3Yzx5hKfhAP9rvY4wI20UDHuFlcRIbGwMsNdvI7DY2Hsu6U3MzniW0ypaxgix8cqn3W3Q/Hbs9rBLe0Ov9uvRJWqd1kVDM3In+afL+0kVBPOFEPTnTO3t+sAahKamTRfs5P1rhXO5PSKKcLiwpYqkULBPJpwO8on0xet7bzvQyrZoxn6UqL0INVFrRrngaFoSsole3N3Iu7SOZ3Sfzj59DNJLzmRb1YlF6qZsewiwHN9Il8P9Z4cjBm2Wt0rkJw5xzG8zLVfRLUK912wDxkRFebWYM6K5/B9P1afUWa9/shvTLn1Asi6Ueh0hxSrMLHbGZof5cUE2VuGzxk4c6t7bbUwhQ1/+OQxb1+wbWKNbm/f7q9cJlSLApuzISKCQLcZa0RBe3fTBfU0ONa//qa4weLj4uZ8TI0kFmwTZp2Mz5/1avZCTymk3Lhw9AcNEyjlD0ThczSwtT0R2z08evx4IGRsipRXXgMGegakNYH5d6NC9jVZyDmzrspLlBQvVtbJfBM5nl3ay+UlaWlcALoV/ZPjIWQVWBb86r7KZAidQvr9l+M0xryOr+lc96O4ReKwrqV9WfC7CqtgdnTV3JQ3gpUZ5Ezjgfr4Ppf3LhB7mB5qGVJUm+XeWHfoLYQQb4kPrPP6PBGEY+05bh2s7rxDs40up2C0QquF/a1jaCBzBUJ7r5KhagbrJzPmDF2KEJR9hUhhtvZVkOxIFOLwIAqS99oNefh4D8WXr78UiHMPmB8k/Au+Tdp5IzAatqAEhCQbsDlXVIm0vs2uE5f7oxwFnZRJhiLT505Ic1aQ66icx/5t/3/8d0Vapsen6vaaEY4i7f50qnPN9s5UTYZwnX+CjebyTqALq0bboXpnx5UhJRzRy5odrDDd0zZUbhEJNw7/jgD6fq5QDMOH1ShWb/EpW7apC0+NnRrQXmSoIZJlCS8es8QKqP5DmgkrPkbMdgWpGus9ngU79skQhPNIQ5R3J3Ze3Cr3JfruqGrfbQnzBIrnCB9DfwuT10j2dUZDathoRaChgszH4h0OFZ1iymFdkXwmjCjACz3luvWU4vL+8tpOwzIadHqUVyGgks7zHHr8xtrXOQSjS69vI1cjFcPmKUMH9irOG5M/+rEraclkhl9Wy/CtZnUYII7iw4blbdHmfwAXwPggqogDSwGI3CZmK87vURF6rXFL2u10EolF1npL/+248cYKHQQcXIh7fDCeL5FQ8empsscPEgXJLMj13zq7dPzQjFx2PxRGQa61xtoQ7DOLEoGZmLlMpNjeOMZFjmLjdhCnVD3/l3Z0lk3/NgsodqMe8n12H5F46TymobO/OsC7w17NFzoVSuzhi+d9Ihew7L2GmtlueMvhxiYafcIltmM8eue7b3smcL4zOGTR8b+P7R38PYoQ35Z1dhZXmDtvNzGbCsC3DBHTDi/6oOASM1Xb1Ej1YhoBb6RZbDnmGNC0KU2olPg0UvZLZqJ79eafbvd78PE2o+JDxbUrs5UPpiQb//3ot/3kT1BAHForzvvWSwzXMdo9BJZqRbxtAmnz+UcNbf4BYNW1ItE3bFT6mIP5ZXCm/3r5Z6YPRYPwy+OIPVqOv4qaWWadKjG7FE0OyS/sWCSDMxkBzDRgesV0N9350wgMN6slRMFynEqixbotk15xSBBVTAIIHKiYbk1e6E3jlosQR4ndoBtpE6AlU2L6nTCEbGU2uVNk4YD/Nqa8Nl+1iIWtllLdGJx3zPCETO8IuXvcI2sEDEmsyj9BRlOD3ni6B+UVQcZNSBWWQXJQOSv9MxQ+7A+6QxCjLUuiSY8Ul48iN1gfvPh9kkeuQZj2rLhDzaD3tVkFM2WDk3C4STwgje7jfh3R4TVhs0p8+ThI0lJvtUk/MOr/OsZv9va3/wFN77X7ixuobYhPveMSAfZQFh3BCBX9MByZxJjhQbuCiZuDl0AbpbL253KZKbE04tep05vfItD8PfMfU0aLaGxy1E=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PIsVPEKyNyMBF5Uvm9zmxajRgHGAxzaaLb9UKPQiS8m+ncwI0oAuG6Z9qIW3wUOG59EQquw5W8nUhjUvGAh5SRZGF8k+5b6N/SFy+BKky9VwKjaVmMwwdjlQAd7amwAWJ/ldpPAMtVuUHWCrtpw08HV8Vcsafq1qHwmR4rKEwzk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxeac34fc8-0331-d3b2-45b1-5b3bc8feaf63" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxeac34fc8-0331-d3b2-45b1-5b3bc8feaf63"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>zk0tHMeC2UfqspZHBd3ztysOCW4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BuyPG95kESWNZmnTkgr/4HPmHdTfHW8rBVzQpwbqWfiN/yGdi0IP/n8WXBcDnl0aNAcfxCRFKUBzBavHjWnZg4TTdorAYyTVfpCgP/GUmLrEYsjAleO/S+RVgyTMfw1A7INGiAZ9hWsvHN3oYWkYF/zalcr+XFKDSecVfuLwips=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Hzj93p0eb3QkAMCAWAwUCrn2WlN/A2bVZGVpfGmu9KsO2yW9Ie8ZpO0eojzjLfuRAUs96gfPoLCStd0+KdmuK2CrkyyVPtSBWaG3/z1vKBruFcDIJiZpLHL57Biz3jmVuiKfUr833gIvO1P4++8l8dM46TxXvtScqbSVygaSYbw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf01f5a5a-8f2a-f39b-1f15-671ca6a33c44" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf01f5a5a-8f2a-f39b-1f15-671ca6a33c44"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>CHkzNuNXz3JV9aaKsr/yKn/EiYA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Q+phWKybjP51DfDKmtt5hUQV6WXw5ys/vwssJJ07JwsKYO2sxHzLpQX6tcBPbCz7D5aRyeV2ytTJyg/K3gMLEgxQ1eEE5pFpn13Dhh6cOFjy9zJH3mcJ+cPUc5tYm+OAYNrrwKJcse+xEzuAKE/BwqKoG/zMgYqCa52/01QS+zo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PIsVPEKyNyMBF5Uvm9zmxajRgHGAxzaaLb9UKPQiS8m+ncwI0oAuG6Z9qIW3wUOG59EQquw5W8nUhjUvGAh5SRZGF8k+5b6N/SFy+BKky9VwKjaVmMwwdjlQAd7amwAWJ/ldpPAMtVuUHWCrtpw08HV8Vcsafq1qHwmR4rKEwzk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>