Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx675e9629-8391-d0f1-ed3b-12adac3637d7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx675e9629-8391-d0f1-ed3b-12adac3637d7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>oQjUrqbUgub5BhLjhpX2vLKEMg8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Sj/k3o87tagpwQyqxXqi8jqg0nzvz/JZlK5Sg5bDlnCb5ap+sEtnw+U1EzbCZLHh5y0yOp5DucPkvJeCwhbSIcYsOws1eyIIDuM+4WnDMjBgAMwhl1zK5hdcV2mGBSMSRWZEQn4SmJYTuIDrcONT90KWTe6Fo7bnjq1Nh1xFXH0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe9728de9-e1c3-eb33-67ee-9ede478e8efc" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe9728de9-e1c3-eb33-67ee-9ede478e8efc"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>dNeI2bq9xOI9LIKxPWb7wghLrZo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>X7anNpIvtkyN1lU/QdFqGEcrOmF4wFOCERvBbTRLmwdovZYgNpVdc/LJHjrz4vjSzisk+uO6ZxRXIS22vnplM2CeHRkiGISYGxT7mQHrShJtXN+m0wAO+6w3Ig8ERDjNtTg072DIQ9sgeigPgI5xDNnASJjDtWsQYQF6ARHePaM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx37b44f99-87a6-c50f-4d3d-6ac377049596" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx37b44f99-87a6-c50f-4d3d-6ac377049596"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>O8SlioxiJi+Mqyh8WG2pAJXh42k=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>bc/jMcwwy3H5vEeQu2MYb0R4Pp9FpfY+axrlcADeuZXH/ge4EwR3LWMh/gNWvfm8pkpyc3dIy+kG1qyQI/uUTbHvL8kIQKU6XtJPaSVQ0VsB2nNBnJ/jw53//iVZXxHge8FJZJCOhOxdpnXtdDk6qgtRLWd6x1htWoCsIc2tyN0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxd0485126-73bc-05e5-417c-ff1c5bfaa291" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd0485126-73bc-05e5-417c-ff1c5bfaa291"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>HT+hGqtMJZMc48kIOzSYJpYU7wo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>z150zmOnEJ2yqxVqtUT0U7mdI3+TQ8V93o/KsEkcjUd7y7tNBnz46LVEFjNeaOtN3J96b5FWZif9j5ZKfrQ05iNb/3zEGaECym3xsE4olHxvrdNie1WRj0H7oL+sYqs9gQWXqFbC2cPbS/KLzxKzMv5zipdCWM0lKELKzAX5e7A=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>qilZ+jzVUkFQQXXNLyAt7zek45vyNJY1F0sgFzSpG/qkmaJC/A5dKKFKFltBQV6gbE9PBffjttCEgVHCdQG9DqO4MBBggpukaA/faVkiBhNgpOnFKl1p+sFq630RncBX8cNI4ZELvHKFKei8D56SyYF3V2rpXXfhgydJ4NNLWU0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>woFmZohG1NWN9aXTfGihZVJIW/HpDFFZxhlijnFg7IJ2SPWYqwQdLgAPB2+Ru6fINy5oC5vRkhwtcBbpxSG8JL1QXap4Y+ip/WatnMP/5rBw1lrV3nY8sFPkq8pr8dCvWRw15DbjNMlzYq5xfCBLUj+8l0E/6ri9/pBUfovphVw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx28b724b2-f926-6b10-8dd6-a039031f4262" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx28b724b2-f926-6b10-8dd6-a039031f4262"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>XA/rHDtKl3MxLrqdHFQf2d3XcZw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kQinnjBmiUcWC3/AsIgW3Fws6q/lZABkWQB8iWADUGJAuLRNjcVdlgsI4qmlermq1JVECBQ98tqkdk2+FkBeifBvPZ7Rtid+hXtPxPe3zs83HVmav0Y1mRie3gLoRidorzdMQ6Zn9zKnU/j8M7jA/PbQ+wpNS+sxEq2MTxRqdTw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>qilZ+jzVUkFQQXXNLyAt7zek45vyNJY1F0sgFzSpG/qkmaJC/A5dKKFKFltBQV6gbE9PBffjttCEgVHCdQG9DqO4MBBggpukaA/faVkiBhNgpOnFKl1p+sFq630RncBX8cNI4ZELvHKFKei8D56SyYF3V2rpXXfhgydJ4NNLWU0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx8fbc0d3a-3a33-e16c-c0dc-a37dcd013ef9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8fbc0d3a-3a33-e16c-c0dc-a37dcd013ef9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>KyBGH/OPiRB4qa4qdoeoBxKAKMk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>oIiNJufaMN+WDf5UX9AC7rZxklopDh9efGKO+Jdi/Zru2+1iQH782CScCxZKP5gfLR7qGA9z0V7xAlkVnQAb6NMSq4Dm0XrNm0nyprLDnSVvzjYHL2rsvrkcYEQAl4H8ObqoDpcaV0u4XGc4jsWAIaM/Obc14Kju9/dzSGSFj+I=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>woFmZohG1NWN9aXTfGihZVJIW/HpDFFZxhlijnFg7IJ2SPWYqwQdLgAPB2+Ru6fINy5oC5vRkhwtcBbpxSG8JL1QXap4Y+ip/WatnMP/5rBw1lrV3nY8sFPkq8pr8dCvWRw15DbjNMlzYq5xfCBLUj+8l0E/6ri9/pBUfovphVw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>BgB+9N4Q4SEUmwPzIyzyi1I1ueMV+iyfxxl39fazCsTi1m3wUMlMDAxRBxZebNHpeigq7yn/QbzhPIVZX0blNlQMlWkAPhig41TbBylLKvEzAiIaFv7y9cCett1PCv4XBzZNaF2fomP5nzgPLdk2nUw7/+Rsj7Dj1Hxndr8bht3/RSbhnJRmo3SC5HNzFWhqxruQpPS9GzshKVNZeuH+tN9mjoxD1Sf2253kCjHO45ZlLLQ5dnioTG3DUqyFxFmVWwkJriGr886pyqJa8XAs3ZAPRWPsl9NMouWFvxaazJ+J/QvjyrVOrx96TRIgxdEWlrCDxvqzfF0KZz8hfqelEht44QnqF/o1BXUCJH0FQFnf+r3JfXaWO4XDxiwghvhuHpHQg3gytGdOkrlCK9vqEy/To/YIpVPUeThu64ULIqvvdSj/3Y5auSOrCmYgMTlwst6ljyTEJDAplXaqigx86rA4obd/qsdpOX6y6TXuYQyWZ5e7J9ML+w4TA6oIQNzv4GZOZIuxyFbxV6CpiZAsiovo+Zamm+5zA1g5V4WQZgAIvqwXJWu24j40k8p79gK08fc8htcR9G3FNi3JGlB4j5vOLBVPLJsqg2xUZVlZH51Em+ZuSmA58ACwWGAAyVq4ertoaPc1U7vFJI42pFV5Bmib6fmjZdqthPkFVBn83Nf60bGlTnn+Eb++11ruJ9YeJkc+xpLhkf9O0jeu/EV4tdC/r51XQiVx4gOdxpRj4y69i/XRzur2PzFLNZThsPbaR+hxFcNbj0KHBRS95PqSsXEUjnPgdV6FzlreOIaslKXPK3h6Tehh4Kd2dgnuDzSXJyX6xDoaFwW2cdecEb1skFc9CZzYuwzlK3138JHYE9d/CsQcfr0PdCHfIvkJ/l/Vz9illU4fGP8pAP7ACMpqILyIxzc5CnC+pmlB7r0El2VjoroJDm8m0LuiH3DaXN4gfl3Cyu7EPDeaSGG6q9uTxRpjCHz5nHA0y8ipVwnAmzr03iumq9i8g7pCE63rC2WMcGNt0Pi+U4Z4vDqCm2uaRefBMFi2K5I8PEON7s8b9Kl8zyb9WVx7aq6XipEcr5UFZo2XA4FjFfMuAGh1NsSnGK6z/xzeSAtAyr6RiH8vI4NSqF6RZa9E81btiglm3tP6dY0whw/epB2RpQ40Ib8YfSeGOS4O6Ucwb4hCMKnOQdeKOZ5U4NTZfcqHLrHFj0eb8BwfPI0AGatRt2zvdjtJY3Bu8GUHyQNYL98KIV8BUNp8oYYbtBcVlwxZH+tQoyGutZ7D0JhbFh9r/G1y+1M4WX5eLV7HG6L2jRJj/MvkLhJxHV6/cYVr/5QJBYce5lqj85MdYloBrsnMaGrqab4O1ZaDtsHpPT0H+w8uSJZsG2L4CnNQ1TUa05zM8bYGBYeojTrIA1Zzu1Yr6WAf/o1LB7dojuV0bDcUxYJFJoHtuAqU8nNfhRESo++7mYoMxjgPZAJINAagGX2o+qxxc4ujztOT7JylHFVGAOO440u3jPHA185IdBXBhe0eq7ypIYwPm9JNdXF9hYzwnZ6hJf02Ui0VhMhzYEgRpkEFyc+iJiMyPdnmQc4qbjqF/OqpIrJCDYCeWVllJ3Sai3jwVqafIxtwd++EdoY9d+LxaolJ4XFaB3t4lMYmqdMUdtgXowK3qwGGBxeKs4jDHkzFlJ8k4ssG29DUsOvXE7ovNbP8ZlN64ts7ddVFh9yQPPd1Kc+EzQr5qxSXpxR+xv3G7eGVV7L8kQS4AydqMhl3TU5Q4wxzk4P+md7FRnvl9tcMv9wiXiwqQ/AcELnxGtB/De1h+w0LWxt5q9uQSJPEHiRChAgdOY8S6u9YU1Hkpgi0+2oCenNzOQPVipgLQ6BXGJt3aEKi1nOhB5qtwnsYt3PmjfdyYNW1ao1NCoYh9FaeTnirk2AtfYS26B/NhghOMjroDydRxVYsBva1ImeIT/cWz4MytTJuwEHQAnxFFa7/MLD6pt7nB9/2IM7CyycgL07PdNG3QDpEhZDu0nOhvXy6YKlqGJWaMXrx+ZZjW9NPFLB+EtJbmHzGX3dKYlMsUJUzU724jMbaPbijRqV5XT+7ZZNlrIduKBdOr69F4B7y/P7tm6izubqEpePYSuuIfGD7pc+F5zxdhArw0MVw6Gbuye0kUcVqhuJfitQ0gFXXKyUvXhXS4b0OyL+zQbx7IBecxCcYmsyBYYcpck4exGpoezvKr0KpNKLmmLYY8NgT+81iBQY3g2n4ljF7OjlO0jYPKEyCUqf+qHUesi3TJ2tbaPMPILRT9E1PI3Ig1TBgrCmVaqwahcjDTWsoV5rpE/EWJBww0Rp4/7XiOsmbNHJ+q6OxqlLgl1UolUoU1r9mR1CgBIj16Opfu4WYDrPsMjMB/RfTN2D9pqnwjH/IGpuSOALtYqYAj7Vvj4G3jEbACoF1KwWsRil80YbI4aLIrNN5ldGr0+bUTOH7b2QwG7Wt7DzG6kw8KAWOB0sfhYTfNz26N8AbOAQ+26iaitoo0rSWuBBMpU5qrkoNhQ8/pHJtAkM1jdZarUi6hSvIaoKk/ouCh+Lkt5y6i3Iug+f+oRihUQP/TrqTkb64b8b4cnzuiPBvYVeRaeAaV0QCB9TLm38X+oNo31HiomeG+G+vST4Ei8OVyDvBasq1C5OP3Q/FHWzANtch6athWAJEjeXuxB8SQuc3wSFhiCTc2ITwXYasfvnFoBMuGnfQ8FBKtQLQ4M8T+MR1H9v0BXN3Ap12Tthsr5YS8BrmQYZ2s5Yb+shbHOI1ygVwHPdmgy4WEg7NjDuQehLYe9EQnqAa7Tw1VzR2H20JrRfZHX2VzAYyNH4jEEGq8MWTyV3YSe/kY6LCzy/8doCM+pG1FMTxnzBoyOQIjFYfocKhMU/DGsMARiMl0jtLLPKhrEYhc4g7wQ3PSAvMkv8sxmzWu+prhDPbvOMRDCY/xT1MYEbdF/b3gJYABQK07eua7Qi2Vz1bAUkhTEoh3eQZObK4nDLcBJvddHlhbp+W9IJHqGELfEooRT/lnLP+pMJQghjMmRZphWkF/gG1R+/0mhy2quXEzMSjYw0oCDAbzCqyYK883VkPfNh4vZ00584zhu2PNPyDry9z6YgMzE2BhpDF8Ech+5f6Wbh7ArhuRjMsr02Z50HpenU07Q1xXKSD4S04pYisy5lE8z5kAJDqYmN+1aqDus8VPG5SL5mJuWGf9c5kqu0343Z4/BWZM1j8mcgD+6elUyJ9EDNFvCGx324Q9q3rAgah3Ay0iIj22413NxqKN4kVrbSoKZs828oClU4T/wBnZAyN+YRDTdi+55wS/Yn5mUT+1QXLRZ0JG93feE7IJJfWiAKyVVOc2EtTsYRZC90reQHGngFv7kS7oW/L9XjBeIWFwFr3+kQzU7YpgyFoxgKiJHYG/yCiSb4f9AzUnLK769HiB0NJpasCn7uVWJcjH6cKI57b6EkvUzIGElfW6II1WGAcr63UK4znW6c5f0FRxR2htSq/pZrH2MvCuIwWELHMB6Qu5eAOpI7duFWFNevnnr8v8IapB8lxg0GYlUKlxow7w+tJVMByfJvAbrRlVLi2K/DvRbIGGCgmMYOV5nZyYRKGjTZmQ7Vx9VMLHLzKrVouNxqJcPKquSThdTelG9eWtwnjlje6BVKleoRN3zQEHEDke5SJwD4197SR16XeJIRdpuDzvCetnR6felyChLpOQ9FcnbdEbEPiH8AUO6L2nhRfC3lrHYJS20t6cgFtgu1eZNU0ydHg+RcICZEwlYw5UpgEWZ6tpbLYVhdntnfyfHwaLRFXgaEWZ5Y6ZElf2yEwT7UznXoa3sstHjpNryovQU1zjbFaLrp0Ah9xKHwAbiH+T+QCYwVUBFDFNNUjthkJjWpCKC0fKLOqYxLoa4i6IL/BvHB6Vy74k++qIVuLOu8MsMAmLkO9JZVgOUow+6DsVzip4fE9w0TlxGiI62yTc3GWr8VXN4S2gRrFpkYS02uY5JWP1Jrr9u1i96ZqZ72paRRP05o7hc9I8LuIIz67lz/dWsHwWfOGKoIak0dOWYfgRRBvjFIztpTCIrLJNlq3TiuqIZ86Ex+8T2jbReFzwHkb8JUGdtK9/7akMcWvlATAhLng1Gxtz6n1JHMpcLRHWf0/aW49HFDMeNqEOPa21J5BalTHypEJwMPwzf6JB+4+2yO6uxWVtMdjwAnJ1OxGEk4Skj5VDNZ3XoHzFpi1fW+F8lOOJ34LZLrE8WQLXOuviLMl4YzAUWPZGCEX1MqK6vCSzrGVAANxPGnSnbSIYKs0k2+63gwY2gXCZxLLN0XZkBiIS1AszoHaN7SGuXEM2/M8O2M1PW8McxMjIpDOuyEQi5u4hV9oBK3NNEF6FnNVT6uYulXYgHdtpzVcUhFO8IUTM5oc2d2AlDFQvxetDmb2o2SDRfk3ll4YbC1iI7HmbS4AGd20vXEDvLW2r6+vd2aXHc8lQ1sZPa6ZyeotuKe/JfZWk1dsrbV6AXOCURwa31DVWbzrqHYSC1GmIY82l94tKrRC2mA0vJf6J81XsA2nUZEm3XVH1U2OvTRJxlFtLjiSLVIDtFXuKMKjULKLRgylKQJpJ+jczdqtydnwaMmQaQ3lEOnuk4nYNp1Gi+DWASvLL56o4a0AbjxXz3NpG5hNkYBn/E5Nnp8faPRRxUgb8Un0UemEQZNHEeyGhVAPH+Q4Z8r6ODks3wa3VWHmoOLP//knypDeJ7dJ9eY6BynHZDZH8MeTSc9yngpPO18NVDx4Grk1Sds+cgyJh2If3JgH2wSyMmXKd7617Mn4h+J0CBcd5adkvpgTxslXSi9FQLeilZj2Wtlks6ai+oOc9eKGekW6xjYICji2DAJnccPZj4bHMdz+d0MaAZT5LgvI79Czk2yBbJ+jnv9RFgP+g8RSKMcAxs98iqVwKwldPPYlgHsTnD+XTCZb34I1Hy+BSrV4UBvnpgLCIB8WSMSjjkDgPfONHA2TPmcIEWAwPraogb3ms0/qas2PvC4VIZBqqAIF2HFdKCM3pzMPNAbC0zJUH+DLh6S/mAEC9kggy8Br141Q/f1t0tBRC9lboi3cLfta3I3iJA2/efe6alQd2m0nfT+OOpqA8n+rP/jNYSoym24soUBGDPwkC/3DowhPTICZvbRMErTHFlEI1BS/ugI4EZ3RrIAT4mtyNQAQ/YZL8kbkLgF+WVrsaHgTnxANsDswBIX2rOAqGGUYUWdLV4CeBQ8da9dcIgpxBCyOAfnb4ZWl4cNb2PbGBjMp5w5/+o8YesOxAWvwev9H8kMsFHtYGmUz5t3FhX3kGkAchEYjJe3RRXkcZjul7cBZevaFqz1crm874Pae3eoUP0NA4eGpU6oLGf6zbNvR2yrxtRSkVjYva/7L2yzeJ2of0pRATxjaQcCef+hmpYRorwg4xtKO/zTyEzbhfWmzom5HD0nvcNjJh6rRx7/cs86K97JtSgUrW3/qqTU+xfZWg32V2W8=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.