Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxa1939a7d-f3f0-49e3-05e7-b369589834df" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa1939a7d-f3f0-49e3-05e7-b369589834df"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+WhkWlC2YQbFvDOBoOPzA5bKZu4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>1jTYU9y7AdZjRKh/YR+eSo+EpZbHjKf7QVQG8TDrgINMcIBZIeRFyEwihu5/QQiNbN7AnOxc035pL6s3AzfgmTL317GyoGgxfO886g9OuTRGJUn8c8tU+nxvg61MXh9PCL+pHD+O0x5EOanM8Nss68oTs6dnQXjnLur1izKNa8c=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx94bf87dd-4f5a-4765-b209-eed9a1b79d49" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx94bf87dd-4f5a-4765-b209-eed9a1b79d49"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>X/iS8zYbGrspULah7bMzaRnyyxY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>IYb0ArKgW90ehJrzYbg6cFJVpkBEfBaGNTI3YzdEQPdO5EVn8P5O8XdC/o4XqEkIu92CeEjv/2X75RwepimVq45z1I8Po9p//QDEohe1Tyk6a5/rtoVWzfwSoD8lB5nfOdVFQ8l/OBMNQw4IKBMwVTelSJVs4w5/J/c6EPDj7LM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbecafe53-bbff-04ff-9977-a1a350779f15" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbecafe53-bbff-04ff-9977-a1a350779f15"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>a7theb7ufLWxNFImijTLaVr52q4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>C4zOFD9gGyEnQ4ARpf+bRRWKxhlYkmocA+1CERB14iUsm64r8QCHYY22OLA9YyGpTEnL+L9ma1LAN56K3Nx3OJD6XGEPgCQPCaIcbootKknglpssNn0EBtUj1HRKvlrdZhyy8GWyfsLmwFGSdhjUGg8FOFKU11O5ra0LIn351rk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx7233b86e-a347-e3ca-9386-9334fa728c31" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7233b86e-a347-e3ca-9386-9334fa728c31"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>PCLgwW6fr+nWW4hHmgwhr0ltyHo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>pT4G8hq1T26B6b5KegAGZABIU0lqCCl90YN/LFT9yrF0xvPbyZZ6uT7VsVTlvlBI/ZZGOr6OpQdchXPo0A2LxVTZABzbII/Alg9xOjW3jlwHNgDxEcNRJp4r4EXJ4Na19pE7rylPhFn+SoloARJvyZIqL7DT2/zQw3E2lulat78=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gCCVm34akbPMvzRP+wZ1YjTbPji8kD6aZgfzd5rm3SCVIXPjlDuh5v8TTUb9OgAI8PlGZxcA6tZEE+NlTxOVcuXfxoDY/sdvPMtLJCRCFV4kqzGdHYXAcbXlzpU4tAIurI9eKPwGje6QtrHTDc8RC3qKsNNBGXyNaFAD8CVx5BY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>2jz3WhA3dnBdt1OsN822UUlpNQB+wbrn7vwyK3/96R6S0m06k1lejwKrpS+rOCNXM/B5+oWJjIu0lI5ndMihPBbR/JkYCVV8G/5dHr3YAiKPJz07BmKdkP6V100APGUyiPmN0sXJxwmOqf6b+wy03XJXxaJzIC1siPS0njUDCCbHtesxojae//ev165B5BJNQoZcn22uTDUdI0UHb2Ei9w8ImxRqVsa+ea2LYXb5Gp/8Obh8OBONl5Mp+Bd3V+xS3vEG3cCv/DC+6YwTuMsFCm87dxcvyigHqFlw97CbcUNIbDyxTRxcVCF9u9dl6YnziSJ+8om7nof8Sv/bSfguCFO2UZQ+3IlSNrsXAwoa6QchTW/F7kdnciAO74+FfKNB4KtZgrLMiLEtMSQ4FvCr+FtuxCYlLpdU0G0r6qNbGUbqLkANsHHfpD2a6KjZcnWnAfiSLRPeJKstiDqSihOgmxJUk34gMiHF2RO64kbf966b8nZsGb9b6zxgLjRqWVXwiCIkZ5YyYC4gtS8qtzDVwp1a2tt4d2wzW30ShAGZoS1Yxd/JhfomEzR3Pm1YDxq+zkzHrG3GzkKRRFsQlr3b6jiCQee5Z5+cokAiRo5wPm3vPihNpNZz17nQZ9wjm4wV4ufzxHUi6/utiv5Bb2nnJ0s4C1kruIaEyNdF2hwnhzOeLQt1VKkKUjJvuMiHUCQEBn9VQsZ1ycgMegOeE7ayYYtEysg7VS7Bk0bI7CwZgmQd75j7NcZD+VobPXbQXBQ0PcRPWmVA2ppJeqYo9dNVs/e3hgVG6CKED5k0/sndOXCAPitHzq1MyHR0DNBEHDY7HiLaQzNQNIw4vJD+xryGr1u3HY5PZp90REwUUaG7jrQslFga5g65927wytelz0lJSq+D2x2l+1Bmlk5c0Xv7Y/BUXewIr4MiRVFWzAL1tQtKBUHKXQrz+Ki3Fsd34y0mVLwAaVff2kzHDeG1UQMghoJNSAJb9XF5yScv6UVmF3vLVL1uxPTtXQmxTQ9A5QeH+uCG8ACL/WaoVWSkFIn9ErGrFqdTaSxztMq4oH95AskjcZtLit8mWakPt56DW3yd73MCqcGY93Texw+QRZz6PIMctPtjx/46imaMJcwe4QQER+t+MrnDcErrnLQRohyTZzQK6DcupS45WnjzHMw5GEQMO5RcnUoCcd4r5VI6e8Ybg4B/y6mtg5uZQ9uDLXDPjk0jG8jH/WfDh8ts2tyWBnTsG7rl5j4zqtCUTrnFR2BJXaLc4d8t/bM005C/F+QA+YoYPH4q6bmmFSvGQK2blEj6lcM9IZV8wUPmW15CMYtl28+Uk/egLyN1v0hlaMUBIc1G1xo03jNWNfEr2Q7idkjXpY8+I35+yFbI6gRQiuxWCgXUxSmlMM9X2M4BCKUIk4BJQjizgvtuFEuQj/MVA6zRVBBILvTZ8rvpm+kF8go//ALGbh9hf/V2b9OvL2UEC1FrqDb6kdR5ZQfElb6iChC/SEhqv8zwQ0o3ikfGD1H3dY9N2uqRg9DXZ5o6q0/Zx5QB6MJsTn9OfGRzul98GODNj2479ODttXeU+8KeAAQG6rWwwVC3DCYE3yz73njn5xo9hgpcPG0mRlf7RadimPTFi9fZEys2pdM+zPmhvkPvD0CLrWhofyMtNbLVAdPRsd5VMs9zeQQ7VCkTVJiBHumDd4DSmcw6MKFptB+FayDEkYp5g9pH86XXjyfipWoc3++zm/KkXCBxix7gyRbSRRkX6AQsXy7MRk0SGvWrSAPbaUK0b08TjTZa5TBNqL2g3IdM9lyTvHNfe0I5ja7F6YdUPCKTXQNFv5grlC6DOm7U8Db4548c/ULRmraW9OfQPkiOiKbYeMFvmV2fy4xqfJWtg5hhMYLMxQ6ZEtS+GnmHswuofpZxvAe97XlD9XKYmwum7sje7SMIBIv3OYTnu1zaoQUdeU150TLp/T0sU35DeFFBgVxUyG47P5FPOE8OWYdM4E/QWUO0yWiYonIdBmgrwASh38i45YNNURHpCxva6EpCvkklm+x2wDRByBZHW1ZB/pLK0lTfbPWhGO7Emng6WAdtwXaiOG+3KuxPh5O2/XD9Hu86SXM+NKzuMR79jU3dlTnNHZqGX+z2XQXqTRLj5590pJUniK33nKW0AqO0l3irtUSHD5WZXFzHV9tXpL62SBNS98E+EBgeDNwHXhuHesNRiAfUcFRrT80NxE1CIT6/vfSe7Eg5mYs3RP6D8waNvzMBn80lr6kVyftFiKF9jlNcWwze0lAEn+OFr6+M2CK4vM6dLuHttC8YuY4SYXDFfQNd+EWHUFDEdLquBjSg1k/RtJA5Hpbn/UFROZ2nRzzKkIs98Kbb74H6xEo6er3aQv9WEliGlts0LD5V+v8QReEPjCdz6l2tihOHGJbl447kwZMZPYjhfLVZRiUKwjsNvtpYtP+YbwIS9zRi7OwVpESnLnIUMRFyGqDRjqv5vjwIoTodcUYfa0njan52UOm7vvWX3ZKej0Jm4/FNOpDRAB8nuZsfbRwsi9MbxducwrRZtl7UstPuzLQ1OT/xJ4FcXeadJo/vIC08eKZp++j8anwfokUz//AsgkLZrwbpAIvZv1gTHqJDHEXCNt+HxL5AwvgOJu1rprgjoLpQmtloXT7q62s+WuiCLmEsvuQfiUXNlGE3tL39mdGNMJQwcW2ivUhmSbRLNhIFUQyFkgyyG2I5saeF9wumjrr8RIhD0fzTZy1weVoZ+7HVjtfmK4bG0Pg/xTVie1hRWiJOcWrnQVpYxWwAQGUrXAVSaRCzH0PvVZoFRjhcELceq79HDfw5JGnYleaSQBWnl1ldskuQr2TpChrtU0jYrSZjqAFIXaNNZ4bkPdNU7CIaEHllWGWu3nwXVwkDvDvrxrfM/LwNrpKOERjtu8++tBdj08Q=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>vC7urhuJbxPPskiV/+WWurzEXEdSkbWj5zYTsuOFQ13QCJwtjqie3Nyhs3aEkMzoBT1E88iJ9ShSorE1rSQRkyTbo84GjW7SX2C3zS20mNzac0Fxzz75YgwS0J7puDMQ4iFVuAJB/ADdjBmrWSLcyu7V+DpSheapXgR2SMsTPEs=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbd546341-84fc-6350-4a32-fb8d35ec61a1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbd546341-84fc-6350-4a32-fb8d35ec61a1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>frhAC5KbOnlqJRqxneEwUVGsLuY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aMSRPefilc4GQ5MZOshQxuABeaPbLlrl4w99WVI9A5+ef3Y40F7Bzh722zOm2YF/TGBuldLntjTcX7ddHWBTJ9qJwKJneW01KEER06ko23kY0oXQN8ALAo3QjKhkcl+aHjZZUFg/E95cTdeBgAODkZbs+/UqdmrP9N/b2fcpMEA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gCCVm34akbPMvzRP+wZ1YjTbPji8kD6aZgfzd5rm3SCVIXPjlDuh5v8TTUb9OgAI8PlGZxcA6tZEE+NlTxOVcuXfxoDY/sdvPMtLJCRCFV4kqzGdHYXAcbXlzpU4tAIurI9eKPwGje6QtrHTDc8RC3qKsNNBGXyNaFAD8CVx5BY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>2jz3WhA3dnBdt1OsN822UUlpNQB+wbrn7vwyK3/96R6S0m06k1lejwKrpS+rOCNXM/B5+oWJjIu0lI5ndMihPBbR/JkYCVV8G/5dHr3YAiKPJz07BmKdkP6V100APGUyiPmN0sXJxwmOqf6b+wy03XJXxaJzIC1siPS0njUDCCbHtesxojae//ev165B5BJNQoZcn22uTDUdI0UHb2Ei9w8ImxRqVsa+ea2LYXb5Gp/8Obh8OBONl5Mp+Bd3V+xS3vEG3cCv/DC+6YwTuMsFCm87dxcvyigHqFlw97CbcUNIbDyxTRxcVCF9u9dl6YnziSJ+8om7nof8Sv/bSfguCFO2UZQ+3IlSNrsXAwoa6QchTW/F7kdnciAO74+FfKNB4KtZgrLMiLEtMSQ4FvCr+FtuxCYlLpdU0G0r6qNbGUbqLkANsHHfpD2a6KjZcnWnAfiSLRPeJKstiDqSihOgmxJUk34gMiHF2RO64kbf966b8nZsGb9b6zxgLjRqWVXwiCIkZ5YyYC4gtS8qtzDVwp1a2tt4d2wzW30ShAGZoS1Yxd/JhfomEzR3Pm1YDxq+zkzHrG3GzkKRRFsQlr3b6jiCQee5Z5+cokAiRo5wPm3vPihNpNZz17nQZ9wjm4wV4ufzxHUi6/utiv5Bb2nnJ0s4C1kruIaEyNdF2hwnhzOeLQt1VKkKUjJvuMiHUCQEBn9VQsZ1ycgMegOeE7ayYYtEysg7VS7Bk0bI7CwZgmQd75j7NcZD+VobPXbQXBQ0PcRPWmVA2ppJeqYo9dNVs/e3hgVG6CKED5k0/sndOXCAPitHzq1MyHR0DNBEHDY7HiLaQzNQNIw4vJD+xryGr1u3HY5PZp90REwUUaG7jrQslFga5g65927wytelz0lJSq+D2x2l+1Bmlk5c0Xv7Y/BUXewIr4MiRVFWzAL1tQtKBUHKXQrz+Ki3Fsd34y0mVLwAaVff2kzHDeG1UQMghoJNSAJb9XF5yScv6UVmF3vLVL1uxPTtXQmxTQ9A5QeH+uCG8ACL/WaoVWSkFIn9ErGrFqdTaSxztMq4oH95AskjcZtLit8mWakPt56DW3yd73MCqcGY93Texw+QRZz6PIMctPtjx/46imaMJcwe4QQER+t+MrnDcErrnLQRohyTZzQK6DcupS45WnjzHMw5GEQMO5RcnUoCcd4r5VI6e8Ybg4B/y6mtg5uZQ9uDLXDPjk0jG8jH/WfDh8ts2tyWBnTsG7rl5j4zqtCUTrnFR2BJXaLc4d8t/bM005C/F+QA+YoYPH4q6bmmFSvGQK2blEj6lcM9IZV8wUPmW15CMYtl28+Uk/egLyN1v0hlaMUBIc1G1xo03jNWNfEr2Q7idkjXpY8+I35+yFbI6gRQiuxWCgXUxSmlMM9X2M4BCKUIk4BJQjizgvtuFEuQj/MVA6zRVBBILvTZ8rvpm+kF8go//ALGbh9hf/V2b9OvL2UEC1FrqDb6kdR5ZQfElb6iChC/SEhqv8zwQ0o3ikfGD1H3dY9N2uqRg9DXZ5o6q0/Zx5QB6MJsTn9OfGRzul98GODNj2479ODttXeU+8KeAAQG6rWwwVC3DCYE3yz73njn5xo9hgpcPG0mRlf7RadimPTFi9fZEys2pdM+zPmhvkPvD0CLrWhofyMtNbLVAdPRsd5VMs9zeQQ7VCkTVJiBHumDd4DSmcw6MKFptB+FayDEkYp5g9pH86XXjyfipWoc3++zm/KkXCBxix7gyRbSRRkX6AQsXy7MRk0SGvWrSAPbaUK0b08TjTZa5TBNqL2g3IdM9lyTvHNfe0I5ja7F6YdUPCKTXQNFv5grlC6DOm7U8Db4548c/ULRmraW9OfQPkiOiKbYeMFvmV2fy4xqfJWtg5hhMYLMxQ6ZEtS+GnmHswuofpZxvAe97XlD9XKYmwum7sje7SMIBIv3OYTnu1zaoQUdeU150TLp/T0sU35DeFFBgVxUyG47P5FPOE8OWYdM4E/QWUO0yWiYonIdBmgrwASh38i45YNNURHpCxva6EpCvkklm+x2wDRByBZHW1ZB/pLK0lTfbPWhGO7Emng6WAdtwXaiOG+3KuxPh5O2/XD9Hu86SXM+NKzuMR79jU3dlTnNHZqGX+z2XQXqTRLj5590pJUniK33nKW0AqO0l3irtUSHD5WZXFzHV9tXpL62SBNS98E+EBgeDNwHXhuHesNRiAfUcFRrT80NxE1CIT6/vfSe7Eg5mYs3RP6D8waNvzMBn80lr6kVyftFiKF9jlNcWwze0lAEn+OFr6+M2CK4vM6dLuHttC8YuY4SYXDFfQNd+EWHUFDEdLquBjSg1k/RtJA5Hpbn/UFROZ2nRzzKkIs98Kbb74H6xEo6er3aQv9WEliGlts0LD5V+v8QReEPjCdz6l2tihOHGJbl447kwZMZPYjhfLVZRiUKwjsNvtpYtP+YbwIS9zRi7OwVpESnLnIUMRFyGqDRjqv5vjwIoTodcUYfa0njan52UOm7vvWX3ZKej0Jm4/FNOpDRAB8nuZsfbRwsi9MbxducwrRZtl7UstPuzLQ1OT/xJ4FcXeadJo/vIC08eKZp++j8anwfokUz//AsgkLZrwbpAIvZv1gTHqJDHEXCNt+HxL5AwvgOJu1rprgjoLpQmtloXT7q62s+WuiCLmEsvuQfiUXNlGE3tL39mdGNMJQwcW2ivUhmSbRLNhIFUQyFkgyyG2I5saeF9wumjrr8RIhD0fzTZy1weVoZ+7HVjtfmK4bG0Pg/xTVie1hRWiJOcWrnQVpYxWwAQGUrXAVSaRCzH0PvVZoFRjhcELceq79HDfw5JGnYleaSQBWnl1ldskuQr2TpChrtU0jYrSZjqAFIXaNNZ4bkPdNU7CIaEHllWGWu3nwXVwkDvDvrxrfM/LwNrpKOERjtu8++tBdj08Q=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx6c579d3f-0370-0e34-af65-36d994c5ef2b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6c579d3f-0370-0e34-af65-36d994c5ef2b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>u1pGzvwa6TuMwukgDtllMoBd8c4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WHTq+3778n55+Giqt3HMCMkutBmpEttkRVnblkdl3ovVcnzwOiZjEqMl/XD+93ROSnVUEJy76lQu/eCSImpAG9PxCFF/E/Mt9ZpTVPJVQDSghxQEJj3WXKn1KwJRy020FREnk5aC/ae7BXSfsqBUo/DPdhwYRtAILHE0LPR+oNw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>vC7urhuJbxPPskiV/+WWurzEXEdSkbWj5zYTsuOFQ13QCJwtjqie3Nyhs3aEkMzoBT1E88iJ9ShSorE1rSQRkyTbo84GjW7SX2C3zS20mNzac0Fxzz75YgwS0J7puDMQ4iFVuAJB/ADdjBmrWSLcyu7V+DpSheapXgR2SMsTPEs=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>VgKaBYYcnEdDEeMiz8IGqd7MtMD+5c5yI77byj9t1CMFSzSEjKr0lsY9MXaKklTkCkXSiq6lG1W+ytT6poAyEK2LS6nLjyjvWikApKPhTb1JPkJTErG6hZmNKjya6hVXNGBN6JmlCk8kPhvvNbEviklk71rduWEbIe8f+JiZLxBYWrTegjHpsNPkLL18h/tw2BhHrEMUXJ95FAGEZNAdWAHlJ56faGIaNeBMrGHVVQWfjXOw4aanthvNmgTdrKyTQCL/08iN1hZDMzvMjjxo2D+7B5Jnb6y8F3+uUejYntOAQm6hafGu15jEAfLj0i1rlXOzVdRCHiqz35iM614g1wP5UxWGEipcYEXeWer1vy30gFm41iMs3WmQBDoGyzUbpC0e5xfX9c9zLBSqoJl1I8bGjdv7rL+2yq97P0zXA2g4QnP/tpWJSG5yiKJKJ1kUtO3ABG38JelPy1WaHWV5UM6dlwF276YwXemOIneY8CMdxHc2QavvcxTi9JZxkyfuulDOczjqa0rqWg7N4FuZMpVk8umRkG3U4a4BaXrZHKVTomLEbPYqciG51D7Uxx0QcvcoQQBCvnWEfVgQdmERHcssf3Ol1WFywr7i/fpGYyKjXxdbplVqq9vp0TaRVu0EzSoTYkiYw9PxoM02sCSjS1ICHnFLJJnuwxHruNoDS7gBdnWeAH3icGApEALEPhWGMNpU0WbvPRUBKlczW+8dRfEtrzlUFg3f4AApUFZ4YJ2C04htePmSryyBiecwxJyuPsfKS+rrmRZVZMxL608mfT3TzApGKKSXH+E8+hoJlPRSFUJuBoFJGVnL3vi/2ea61AyOkHX8W8wl+UVkfxqslUtTSeATOeSvFmaDpY4fVuhF4kae4rXMyRY4AA1BbacHcu4Rk/CgsKUOD81RGR1FSotO+Olfg9Tsv9wS+HXw08gEoZXjfmj4ozkaJN6BURHQZW+E22dgT+VxiuQB0Zf4FB4/VXp/Yg5S/aSKiMySFhV+6adsZfx39hDMSiDxg/nT8SYN5xrSri/mD/v7zwIRzi+77Hvj+dZDVpyotVtVmHHqv/MWsLgJMKrlnZWV8kdqwjqiDDcQaZKlVSvjrw0s4Qv2871FoV3VmApzcNSGAWtz//P+h77FZNj4UEIm2wnP7EruGTFZ26cFCx/jIRoVp1GuLdHwtL/w8o32wTLJhNKM8YtnB4+KntUGMju2H7oBqURPB8MNypzCMgSSVpv806gLPmCodNeGt1O3t5aopy90kS5j72D6ZmjqyL72dJg2CdWqhPmBRaJhUCsEewfKZ5GZkGSafBAq+S6ab5796hPhOdBzk182UMPVuVqP60ElGk0PDgDKVeWGnjMNormhVVbO+XrzL7JqB/fL9VsQnBgWETuvFHIRrw68ynfoWDRTw/gQ9PINMtF7LfS2rEowFsdiak1O10fbZUJeKQC4x16nB+LiR8q9RPlMGiIyoyC2uP8jUlEMxyGgZuwPwygRXl6yRs+mGMkyFpFSi1ILyjI1zXnMvaMQ6kt3AU/4ZUmuK81dAm8+UdcrUMSi0qqDJAPMVPJVTDl2nkFcCA6Xq2LSj1hD0rdBzPplKuBlu8CYlNTY7UfUCvbamTUJV7QiLWtWZmL0AvrN7f7++rolkkS2zH5Xhs/7MJtoml4MRhkv5NfF+Itkg53B1o/Az4/iuLgMoCi9CX/JYXFmDa2zOLCsbXT1TLPhx5wv6YzUW/Ru9WuVnkfhaUsLEewnSsizapWuj8BiVHCSiSQEPJa9MC6XcWWWrbB5kbBJ/PtV2U9ZWP+twi2fURRSg3hyGWvXuUngO9FWsaK5uAjndRmXIzyOnB+UTEzlBCxgLYbFtZq3QslBP0rTS0ksmH2LlwGKQmNo7Yn8edPKLXGvwXDqz8sAjHLYXAWsuoXY+VgkmZIPSrsbr2V3iBmzHrlvdPjcRmCk7X5ApNiK1RWWGgACKgHAJlbEHmxZuoU3iKujVvNul0PlPnxQOKWQpwWvd+0U3QPdHm0xJQWWQsNy4QSwartPVdrFwXe5aUP0xFEKahLJyPLJud2XtRkMYjS8HWYH+0STbjvHtOQmr2bqVzfLRtxHeaYIIJfJuiLfXfsasiBaxjAvu4TfOyIoyWCVabbO6AfunvoiUSgc/3VSBipuGmI+KH0XZAjJoAi7gZa5ouA/vPjk+NJBGFg/ztuTZYe5Np7+mv+Dx1JG3zib1gkkdPfAWPAGk1rstSalp+yUjp1VP1cC3LvhVI/V2IwxI+wazEKqpgjF272XPeGeoQBs1xePDWEwrDWqr88RofJbuL/XPIMRxXxN+z56oRRN37u9pAbIRdEJagDBShjfl/OujKlhXqdfQ0/2j841LiLkK58P4U54mJErXMEIGx/cnJuKDDwLcuop872S3CQZ5qeFQbyDI58wpKTc2UO/4N9XDRcbfcOtSCIEa6p7quAQV+Rpsl57xcsTUqFoS+azVMQWDOVGw1sO1/6VUL4vkMRto2SlSgZGC5HhSUAinA//yqccvVBcF4klY3PrnnK4VgJyejIHXsl1W5fKYjz7b2jeQY5xh5WQE46NoxIxPWRbE2J6UBH5LS2WreUVYu5FUNVygSqsyXcON+Yd6KRWuaNn7TaHCJcOvM/3BFjcBOxCYEEdXBptD5py+8Ru2l16y8a8izd1jq5y98YcQqo4KIILTfofnNTSUY8XeuowHz0ryjsA9n+vL1OYXikpnEZMamWNg4BGR3RiarW9HEs/tunS0aiaj9cTOCqiNbSJrvdtpgqBgCQyKIhNyDzJRqEQwH5owE8d/W1avgWyb1Danit2TGUiKaYFfGNRDKFd7REl0PUOB73ZVZCS/bDuUVVvcQyya5FFxtKPAYpgNU85TZJ4rGr6XMp7dl3dUFYLByHrs55kKQYXZOZe7TivdGV2Xa88TgTs7yM5fFfBjqyb2FS04Z36ZDtXFCh9N9YaXlq5VGx7up/Hh2iRLNgzo6FK9UuAlTGh9i2uhwlr5QqFxtecgYdKc/FzHruvi0FT+p5e6I8aPK8SzU+j/HqpScjcjdSMh/xRoHr/YZ9P2ww1rJ28sLNF69Trsx4w2LQT0ad/BKhFNrFWejotFjOfT5MQM0/V+ue6NSvaRu43eWBwsSdpAYRrwEDLzocGOiGJ09uqKoXH+ho553eKMvkPPG3pWHfQ/9iM3sszE6XpsfXBzhKrGn3HhDBxLpbyXm5mEpK6dDr+pzKejKgS1TiPwmmsj9rWjNCoe0rZUWjOUUIsALSFnbbjm0ekS3Yv6rbJqXiercSZaAytvpMvALNxXgz0k6IAPGT/KNYnOw6sso/0363uKMbFckqlSsdBkHS7TCUpxDOXXTPhgiStPArraevMsm8Glokzit70t469Z0ObRtkEqgTY3yTkxnfySJtB3e2pC1bLpE3oVJ783R9a32Z3JCd5BU5ZY0gv9To8fvaRyuD6Rma5BKXIaC2dZK54NmVxZTqCKv+iS5AcHsXUX85Vao44fLXN2tMQjTCaB+fC0h/P08RAJIoGaSR8p1fDAcn7zOLvXJ85mJXNUNahK4HU92ZfxJG6iHAehHV2AB6U/crpSO7QwlnkK0Zc6cQ0uBEiSrEr1M8nBRHi2bveoR2nLhJbKMYCRoc6FGOb9L5YZBueswe97OD3RJkc8+hzoXD83xZ+FAYsf+jbxEkPIHBiGv+4mVbvjbjans4i5IBZm3SngbmnAWK215zw4n0yWx4l9wft/6KIvVmA5+og6veBCo2/ynjSIeiZlR2g1RvAqLZJO2joT0c5rT+j1OqD09HPuYf6JFL+ySORut/bCb4r2OT55jvqf+/UoOft5JbvecQb0BY4kDnXwwbncnqV0WBpGX5IkOt2hf5XJSHsezcItkWaX0bZUhVXKOfIIOl9RgnJMdJQo05WOjagh5xgY8b54UO7xejMza5iUqeNKr9L6grNYcZtqkKTyrt2LSR5ur2GJjr0ZMlN7htCGBinxld0opRixh20Q6RWh+A8ZQ0lrWrr93W5+kE0APmUbS+Fvwl6hWLEZdvuUmDNgMBaD7NVb0/i8E4NUBi6FN2ui56Za3ZxwKRqNG8hyCYhMdMMyBnU/i0sypToWa3zx6KDcA9f1Gwj863lY64Kp9k3ni7hJm3v8AxQx2MgPsv4PQL5Aje7saosYwI4A/ZPx6r7ofNMuoUkdETToMQTubqqtqsRXSxHo7rA5Zd4hV/wZo4IGBM2XDuK9bNunrcSl35t7RgYsWvptWEtg3XDSNHbekQMRx1FAtaPm6C04IPNnxWDymV/gNM/tyUjS8QsLp+f5Fx9dmkRT509RtvWVSLJERo+AUGTqly48ExW2KK/4Ee5Xb9IvQobuSOuRLhXRiIMJ7uhGYjUs9NcWXuvZQRZK6o/k43oGfyNLfZ7YEj2NvJ6IkGxnSf2MLipVz3wHR1skiLXSY8TfHwOg29OwABCZxB65NykN5fu3PltrlOgKatoi/Y1O6W0+vDTHJadW18+aqqqnr10pbSIfopW4lguIjSr5FSfwKoS/4O93QDhnPApqkwP7t9rhAEhQQThmkN1muqJrEBHkNLf8G1SCK2fW8XlbgOI9avrHy42E3tKkR8awNekxyNDg6kfXFXfBCQSD7Q7fgpcieoMVbTVyU2GrILkaSSf0SwuoMHV0cexXjpl/tQm+mmgktVsfP1OlrhN1dMSSNGHqcvSRgfjDhLsFKd0xBJ3GXo4q/ZYR8axubfQwLdURUFqDmiopAb2uIhmBEFHlhE8tgxC62zFm6AbdIxyDcy5x9o3ZXIxKYHIzkL4/cWZ+SB5UErQN45UTjMoSJGWQhk19lWAp6hXqlMoADviHegp2WWeeOac0V1+Kvim3T5vs3H6B5NWisNbB3ZRFolFO0bmSoUiElVJUnNP3XK79YySPaOHNivVPuiLAyLCsteqRqSCfrmYGWdkcgEqSo9UYTIOGbHZbyDaBuMdUNtIwr6wa8V5iPUl9Zfikw8VzoDUlG34SqAx32kyEwfMOQWxbCyCd7Cc6YLs/lETpUNAKga3s/PF45Bj7v/pTdDcPpARGGfDo24fCo5kSJG3q+Zow6+YHBs4B5jGtAJQrZgxNRPGAS3lXo/rr6deWeP9KD+BNnzfe/Sslgc6n/F46LllmR8FTWPlLVQohhItem4Zx3HJolxe6lNsNaOzjZX3WDTC8lahv/QICOPMMnNwxSjTx4eY8+vYc9EKpR6v1W28iaSY2mx1m/GR8lLXNPVO9HmKWemkrtmMA7scjube1Hb6xAZfL49hzblKuElOjPQsuoibcu9orEqOCnpzfliMTSJHJki9WKX1gXo3SU8BRhysyHg6OcYO9MWcWMofHTMnCWOF3IO2vC1H3dMgFRyOPEhtCzhBv706ZuDQnzFT5MX+ufmgn2REBBUJGKXZpd052wxWEGGbAjEkrbVmNjg8Vj6jGzEoha4Oh3R9QMmS/SC4OMPFWxwlI7ItCi3XMmk7a4cR4/A=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.