Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx53b179c7-48dc-4631-033b-78c5700af616" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx53b179c7-48dc-4631-033b-78c5700af616"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>M0fExcz8y+vheE3fL57i75Em57U=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>MA/nI8EFR9kUF84mjU3H5gQxyV458phKfMKI45Ggpvbb99xkKThIDT5IIkc7dau57cxrOGhHg19U1BPgwElzOncoPIn+GsQenQ5hC5Bm+7y/KO03yilSMQgpyMt0fv3eGxQiI3T8jjq+KeUjuL3G/WyW7izjV1lQqZzsozL+ruU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf1827e1e-7c67-f3b5-9543-48a4b3164820" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf1827e1e-7c67-f3b5-9543-48a4b3164820"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>M1iHDErS/VgaQE/bLqIYILUdB+Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>HFU9QwvWKDBeL20BFuoMiBoTXM9h6SnxysICFmerenBzttUlWppi/2mj9Sfi+xswPp77lBBh+h9TPVx6eLmm9+yvTphEln2qRFq4fX1lKaXC+qo44akFjC0d2giTTnaTw6CJERSxURPZzfPHiYE6BpQDsjhO3/SAeHeFjAxdxcM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3b565578-c7d2-28c1-9766-7f6b60ad9634" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3b565578-c7d2-28c1-9766-7f6b60ad9634"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>U36Kr8vYvxeQddBxN7zaB8cxsLg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>zNg/q4VQ/rgJL8QDDxvGaDt1kaIjeSqXwFLCAcy0cucwC378bNFM5PsNg7rb9OSLciSgmZabr+3kyLuZv5IPwz+aAdgIFo07TLTT+3u4JM2J9vsKq+hf7suaWqc14vPQGHEdQNUWeSZ/soBDSgfbZXsfxb0j9G0bD7MdJ22BXI4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx8ce68b4d-dd68-9b2b-d37a-e7e1eed731d4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8ce68b4d-dd68-9b2b-d37a-e7e1eed731d4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>8ttVyxHbrMFM1Sh869aBILL7JAI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Oaz8zhhVMP2V5GdG7bIkq2yT/jhQoF7ktZ6ZYF+VeENMuzm92prfIYNv/uXJnegQWtNeuxBCbAw7bI1HoZMG6M8Z9VpGhVm+8CFEb3EeblUemI2lCphGly5385bcRWKmwv4933wPLyowlWnNbb5olD4m8mC2n226R7J5U6jdKyE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Zj4RVAUfsmQweHNUeT1lpZUoL6H+rRkz6zy1bse2VBfDZCdiWRHG7z8wSBi25OXI7mKE/DF8vLOOM2qbxpnB1EwWPubngyf94S3lJdJeU4fLTqKu0Bm6fYECvxX5SX4OPBr8tdj1i/StsCvQnRbfSm3bUQyvFflvHCasA1SW57k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Mo+EyE0cvnBDZ9PAvLgTnLKYvzlMNpbzZUYw+gOjkr6/V6KiV2U8+bVdVlEkW2/BfARy4p2hSYAS5vF8KPU6Rxfpd1LHkD2o81TM1Lv534ZqOzDwwzRspVAyj6HZxkcqOBZtAKUpq40RN5aLyUxRFzF5VKF94NQ6zm1yQAv1iy0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4e09c739-a74f-448c-57b5-3fecdbfc70e5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4e09c739-a74f-448c-57b5-3fecdbfc70e5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>I1TSm717k3M0is4qmSeLgddaZNI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kY+JksesnFr4/+u0KjdlhwAHccIfiNctWf2GI7C7BmKj53Iz+w1NrOs/U1npGWoKI4LTb+ykFof6biJGGXQV3Ihc2k1wyKQh1ndQaxjdq7v8qfYJ/0RlIu1cLsQjVzCiZBgSXZjIrPaHCRiB3DGXYZ1g7WevMLBJVdiXtpzTUuM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Zj4RVAUfsmQweHNUeT1lpZUoL6H+rRkz6zy1bse2VBfDZCdiWRHG7z8wSBi25OXI7mKE/DF8vLOOM2qbxpnB1EwWPubngyf94S3lJdJeU4fLTqKu0Bm6fYECvxX5SX4OPBr8tdj1i/StsCvQnRbfSm3bUQyvFflvHCasA1SW57k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>L+9FTND4AfoNsadmJlUKLjmqp05Jm43uGYjgItk5cBrNyE0qNH2pqZdv0lqhiKPK4XuIHcetN+ipFaxjBbQWJSdDuMn6GPJFvzsxz7upIb0U+N/jvRqs69T3C2BXwsprLz3xmFLXEeyHe0ZF7xRQJuMrvE+eME/vawM5e+P711uwj0aFgdmS2b3KnLUfcCFkndt+9YBahs3ZW1mnBQ96VbITgksIn9sjq552SSSN9A/pVQYTxaR3l0bwTVJ19Y30ZK8s1uUrxGCRaChfEdxYut386rlHt7wvIrF6s9lD/2mWHwpffde8c7j/+j3RlHG8IIGx8J+UdQRrW7RFgvrbMJ9etYw/PmdbvE27cZZmAnnhfp6Of0qPKf95XhMATosUp/Ej2Rax0+wxTJ5t6OzW4WlW1tNT30wkfqif9Ms99v5bCHMvtiBJ3w9gccUr6BMS7XePs2PbW8F+ZlZi0rthPIw+5mc3bBr/Urkz4pUW88YsCeRyHiBAMQ7FbV+g3OYVy+m7fDDcswAWvVg/XgodQt7Nw5BM9DUdg+Xo98dKGI+jRQXQap03pdZoRFpSO21KqEmOD6myho7YOTWSOn6rnzVMN2dfVJ+szJ4PVp7O94Q66t1bGsKqWkcuyWXgO4y1fMvGSV2tKf9mDf9mohXd4HOJPNZDcFfLngAxZoh4lcfl2OH0SY+bKAveA7tBLGpTnY/lkdzpvK6m4yOSg93/U36pBuNUtSHLE0neOsS7wVBJtRVo6YUDCSK+ly/yBEbE+YU3R6tUBIbzjPYHHPRZ7M+T43/+8cHzifs1tO7lYkCK6eHqucuVU8Vdulsg32UwcOyn/JXCxz8Rqw525HrWsA3YUKzic6SsDjHhjhEnXcwCfJPe1CMe2hmWh8THyk9d5ofu5nPLAnbsCJjgMmmBO+KzG5A51YkUY849klYHOo2Ir34ypQ3bDVdqAzbMQB+jX/gbP0XbhEd8sPeaQ1niuuPqEigvzPqdC9dtL99ZeuqgSrW9V2IyOkzI5LMuqwWUE8KYeMZJV5rdZcnAfLdquDdzaZ4ciEVixX00OHkTkjJDAiPVaoJFWhvTME7sExXNtyFc5biVBmOZevacn6IK36SfN4vEZcElfwGtJIz7Dz8UB9bEJrK9zKD4bKctNZg268u2pye8pxelj2V6sFsXYmfZe99uSrxMutwi9BVmaT/JWZekX7n7h+1vGvK4eqjbA5EygbUkvL3BRyyWiWSxudomYRMgk/Sd34YGIDW7K6hVksaoBpT6p0ayLmCi/sJW2ucf06hk4WehDe41LWjmL3dFWBSDJW8L/6dG4JW3H0ZunxcE1QbPcBj/K4vUNCxGmYHm1RJ0aLGRH0RxnR0II0n67UlAnHKTGjJPVrAkVYQZO7dJbQ064RPX2q3bGOgYQcYMcfBG0BBUaxAmim+bL4mT+Dzk4jfTFPkb8mQ7q/vmz7RXoBShWfqVBF3NFQTk/KCKOiLse39jh5VTNnNNQmFB6jsPlkj+uYMplmKn+4MCpkLK5eAnLEs1uTdqfKuXSHSBD9bGGTF62UA9iL4+di+Sx0i3GmekpG382hAk+/BkfbFFdMsijJlOhTOCJXk05qO4HTamgLjBANLq/10Cr6xia41zgqrX8EUTXWir3vHrpDBxK06sN0naDgOevaep7cy0A8LKWXpVtmJwIVtoTio0nHs2G6Lc4GjQ7m2g4tLd0venPGz2Xy8CSE+LmyU/xYLB50SxK7+WhAxAv7WH/OM9Ttmbu9k8N+ayYDOdqTfPSwx33UB4CjkqjpEHiidUDl1S0c5Y6Gqa4QibEuo92Zyk3FaaJifmIqZi9JfkbMHtHd9Qi71lgKFah5scyURz7PhlbT6E3kronzCirWMbDn8OcoGP+bopmn0bCJf+1BSE54QeBw0kDyg0SLrEvTW1PRlYih9eX5ClZ0pMrH52GfHFYQShrxlWt+IzHKjrtMnpVnpr81/LIJiNN1u81FlF9FZ4dYsssjnQCubxWOdPJcz7RVUol5Tf4j7O9gJJREmUIAlaGRggKh1M78LvsnQ2YbNwk1PyaDarOnqbvYq1Gix1IxripHXmJjogNJK28jMgFltmsFGQsGv23jLsMgFrL2Ah4oWej7SKGJIi+RAiohDW2jcUS1cIjXlHtdmPRP59cnM2g1Z1Jykw2Id/u7WUXfyJ6jeReHOQBo7qIdpqySec7ccr3YVRveYoqsrLPaLDL9CBtnkjGShUOtogEjn9tl51ivVHczoFcarwX0/H2kDVOMKfZVcs3LrE8WmkjEPeltK/npJ2qvrtJDBszEwPMr5tWZgeqffewxT9BG6uifPuXzE+nJ6anjP/jMDRtrBfXGppiMCA0ghpKVRG1usCzq0oAsHHFeH2x601YNk8/+5YJY16WRnmC04NME6BrbVTeTWvZ0oys9Jl9Et1EuuMl9o0OvGqd9xFfrUl47pJsmB/MB2cmfOXLQ3W5mAUi5rMJHYUNyXHjyaeE3SXsqYhM95CvB6NpsiYogMviOjSOy9WMpWARDKrIH+34xpmf9OkEeg0D/6R90D6UAoG33w8HwpgoAJ40g2DaHj6A4YqYVqYNvStoEXC+qNeWdil7BfREkqyIK4taYLKkmDQnkFXv/Asr7MmA81J70Eozd5dBrbNTxKUTDkPx810yZGzp5RQRQOQZIZdeo9ehhjZEltVmH3mcU9TURKC9tk7d/LidaLjymvc5leY7QP/GmFxuvLqBTM3ArMOuOh+dsqsypGkfwSJy4wRaOYYV5jmLADU9HlX59E9huzcOyqMVH2t8ugEOCsuOdUWsPQ7L52WNKvM/zh6DSlrAorYDjUoGtu1V/TXCjNOIWHYfVldze9T1ib4g/Yup0Si/ak2RM+L3YPwnrpwIcR7gCRSHQSDLpfdGaDISaQ92N3151R/7B55KlY=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2e00d8f2-3366-f835-e09e-27b8f730fbde" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2e00d8f2-3366-f835-e09e-27b8f730fbde"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>vgJP5FNzgqRR+aK/yROdt1k7VCQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>FqW+LPRWQfEkTxVrS/0SV8W99fDfFRufEOz6Z5XMj5ZwzAVK4YOhx40YxoR5N/SR/fHmb2z+UQ1m6dZZMpNHVMwIotNl1ULT+2t0Q4sZQAXQqJCFcCa64WyE17hv85j2w0e43NPzCGOdHUmNN+2fybvg7l1F/qqOrKrTeP0hMSY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Mo+EyE0cvnBDZ9PAvLgTnLKYvzlMNpbzZUYw+gOjkr6/V6KiV2U8+bVdVlEkW2/BfARy4p2hSYAS5vF8KPU6Rxfpd1LHkD2o81TM1Lv534ZqOzDwwzRspVAyj6HZxkcqOBZtAKUpq40RN5aLyUxRFzF5VKF94NQ6zm1yQAv1iy0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.