Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxc9d4c5a6-97a1-1d66-6d64-9d3e0446df4e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc9d4c5a6-97a1-1d66-6d64-9d3e0446df4e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>gMi/kl4FELerBX+NoU76pn/cl34=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SjdHrQ9OdK6CUAMgwZi7iV63EqIftmMFAakJmZoGHjFlJzYqdW/n8jaVZaciUIo3KLuM4LL7b6MZjoDGcclQE+4b1T7/eDNu+leVx3DDAZ3o4apXw0wP9hRb7D2ft7DwsuOyEbGxcTcXqb4ZYN4GrCwfw/20SnsdVpepU7wuS0g=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5714a6e4-4de4-f636-1c6d-28122e7fda77" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5714a6e4-4de4-f636-1c6d-28122e7fda77"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>URr+2EulpEshbAivyreGhwxqEzs=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Qy/x6QO6raaZL3Lv5yxMUVnCvOsE4aOhVBVo0lE7zjVUYEKdQZ87UreYcBTstkvzXoU6mxerNZZrykBLjinIHzrhUv9gKjQPpH4rSTtt5l1iXwS1FoWIN3yi/cyE2+jkAOgvbgQTQ4rGwtcAlzhEL731yakOaTa0c3ijLDkRE50=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxcecbbde7-d977-3d33-7d5a-f2db634bd8af" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxcecbbde7-d977-3d33-7d5a-f2db634bd8af"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>gCmke4nymqcdLlvYIApvYjkxavs=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>i1HsItNa9LZ8ZV9+R45Oe3vfBXx41awK4HxcqZiCmjz5Kb6dwuk+7e/2YJB8XLYUU82v1QXg7lspOuKayMZBvan/w9WKJgBIEAsaDJ1uHY5b87lVh/5qnktrWU+qrZvDGLZxW+NvXf4U8/ymbNtgRmcCYLSlCp6NmNm3ITkk7xo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx1d9eb0f0-aa35-045f-4104-6cfb0ba596b1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1d9eb0f0-aa35-045f-4104-6cfb0ba596b1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qdFwqVwiz1D4ocbX5UlvZL9wUxM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>b/uN5OehmT+2hIW6x1elVMq+QpNa8RSh0s9EaVhfdj5p7Hu8c3QkyGN4VQWw72+VhwIkGdOQiTYGTPobGV/XfZzJwUZ+xHMRINH4VsmhTuFUjJNbbVR3GM7wxWSD2agAsIPf8xKb9zYOMaM12ZCpotVmfvxfpXfTxAZ9F4wgf4I=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>1xsVsaVBnrvUy3EPrxtmTb4kOxMrJM3CuFaE/tGVBb84XNgdCOW/otHUC6iMLCCYBT5hZza+qoN/5CRaXWA4+T49YPlFfVR2/8QJ4/YV8eKpZHFtMz4hWO/sK9RH6uGEI8UQbIXzjtnLuHN+eZPJ3SKT/CzAccszUhX2cI3W36k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>e8EhlBuA3uru29BADleJkC7wV5tBvCgkzwNUhMro3yRcOVHA+lkMe0HtRh8Tfh4VMC+GYK2xxUIcNNRVyexbaEaRSD5myd7DzjIpsrhNaQuRTfdZcL8Dn5ru4G0ax6Dh/IeZXHpsoBnIT60omOprfAh7SR6/szQ8bt3qJcS23Hg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5e99fa5b-71e5-f36a-4aac-5aa77e3b9fee" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5e99fa5b-71e5-f36a-4aac-5aa77e3b9fee"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>pBSliupPOklGHLlmwqY0Vnj1GMI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>xZa53t87eTmIaIxV8rZ+QGm/6CA51QhfEOAZiIdO9V8OjTqrGA9p6lGw1FyiZ97zesqbti+S0p2vcoBwIha9+I+aGsVNXz69rys9nf7QwS3na2j+FCcyJaOHMsmcEc2PSmwSYS8Odgif5T5Dha30gLPuZIkkcQc5Nc3lawyc/kg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>1xsVsaVBnrvUy3EPrxtmTb4kOxMrJM3CuFaE/tGVBb84XNgdCOW/otHUC6iMLCCYBT5hZza+qoN/5CRaXWA4+T49YPlFfVR2/8QJ4/YV8eKpZHFtMz4hWO/sK9RH6uGEI8UQbIXzjtnLuHN+eZPJ3SKT/CzAccszUhX2cI3W36k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3721e00f-987e-3700-4d4d-1ddc349b34fb" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3721e00f-987e-3700-4d4d-1ddc349b34fb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ptqvnmys4pnPW6t3h4/43KudRY8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aLLyAHEHOdDhNc+cR1IHyY+JYra9L9/MsquTSx3J9IggM3OkjHDtZTpZlg+jaziMbsInFayJRtdgBYjyzjxY4+bIdGN7poZqQ7pLrM0uaVmfrXl4E2Wv6XlWe+NeSparsu11pBgcCowz27rE8tbGM/EJACzt9k3DoD7GKaHYTrA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>e8EhlBuA3uru29BADleJkC7wV5tBvCgkzwNUhMro3yRcOVHA+lkMe0HtRh8Tfh4VMC+GYK2xxUIcNNRVyexbaEaRSD5myd7DzjIpsrhNaQuRTfdZcL8Dn5ru4G0ax6Dh/IeZXHpsoBnIT60omOprfAh7SR6/szQ8bt3qJcS23Hg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.