Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxe1efeec0-6de1-d94b-b557-8ab1c87c9b6b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe1efeec0-6de1-d94b-b557-8ab1c87c9b6b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>CpHyzMU9VwPwpuEGjJ7h/6hfeTQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>x+9RhklWpOwXN/bnyBAk6iEWVpUi6keyMLQfTxLkqPAjW9hW/t/hpm3VYHJJthQN5U6bLQVgzYl9mJyNgJFNFcgIRNr1KtZIf5QOYV4cyzjkH8qiH44x/safxqNuPsDqI7zSwwAy//uMJ8srZLzDT3QYTNxmC6SeY+2omOf2xsM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx214fdf26-50e6-951c-4021-59ef546a99f1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx214fdf26-50e6-951c-4021-59ef546a99f1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6FheFwZta0nQlcVlFpu0zJAiqoQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QZIv4b30K3Qut7XTbeFYuIdwfverTn9kCovuhwJoyg3yw44RERZc1CH+TuzoNxrQBdHwSO9rjXd2aUg7JNbVAXAh8inQ8p5wMyw8iXkB4cxOPL5OQhmYa1y1SAuNDx/otF8KFM2LpRlAhVdHtZylWdEGpmwfPcANMiCMDtjrV28=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx6e938730-0a76-13e6-6319-fa2028c3486f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6e938730-0a76-13e6-6319-fa2028c3486f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ST5nIqM/+jQ9Iy+JChA2HZ62ipY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>KCvpaRg1PL3ER9CliXea2YPdECfDaboYYrAZkuTzgCPVRMz59Wl1AGLDBkSMH0AdbDFJz+i9tls7D1eGo7mrZdvoRR0DE/M0ZnoffFr/1IAVSamN+c0v1JMZ0VDSIaaO4gcsi0JgzW+Nih65pCXug9Ld0lCF8DsG6nZLwKek4z8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx9a797291-c81f-f05d-bc1c-e9b0fa92c3fe" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9a797291-c81f-f05d-bc1c-e9b0fa92c3fe"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>kxyPg3eEp3trure22zpRVcRO3DM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ZVv4csl0fOu2nbZBseCOc4y1Q0mz0eJCFyftFXjhBZNgUda+F5WlYrZI6HtebLDbMX9i9L81egoxgd9/a0ybwDfEaqQhYgB3FspCP15o204D36efh1INPZx74FJiW3sum4C648CGM1CkUQuQp259RM1BsCc3lhWqaeJADqJnzfM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>BChRMo9wE/CmB9JViOmc6KjUEWa7Ufde4Gr86WFBnOzbnKMhG3ExiGAfP8yHO/wkEVYQorjixKBQu5Gd9Po79bpTRktNqmA/MrmIcUBiiQA3zu9y0s1iXefSfGOxdq3jYA96tJ7pzWLwnlko3xAwR/vKzOSaD+z+rO64evPc5uc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>f68Gy4u9f0wJiczREjJcmCDaO3orEqntMRL+du8UmZTqxN/6278qJ7R5NuJIexFdXsIOdikJidLW2fC4X7yTOoU/P1S2yTcgtjDbHN2MX7lJ8jtQCbJxA90R9sT4a2wXl0T847447LV0iIyneK7NvpHc/e+NoF8kLDTskn8i3nY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx62f65511-fc95-8742-b2c5-0a2851b3d2e7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx62f65511-fc95-8742-b2c5-0a2851b3d2e7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Fm6vw6QaV+SQU3HCXzCgbl4ldd0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>nVR5E0S3aHEengc34nxTFNcKv2bc3YUNzQSMM93VSaSTPd9yfThtxR2RED3456wGX9CbwRL4PJHT5YhrJSlgyoOXiu4Y0rHetPTOypqTfVp7qeD1VGswFk6kKqW9lzQ0RJnMlUY6yKmgQ7zxcbsaKk6g2jg3FXMn3hxPPTwmd8M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>BChRMo9wE/CmB9JViOmc6KjUEWa7Ufde4Gr86WFBnOzbnKMhG3ExiGAfP8yHO/wkEVYQorjixKBQu5Gd9Po79bpTRktNqmA/MrmIcUBiiQA3zu9y0s1iXefSfGOxdq3jYA96tJ7pzWLwnlko3xAwR/vKzOSaD+z+rO64evPc5uc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3fd3b082-9009-02c6-5e3a-28ac8592cd01" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3fd3b082-9009-02c6-5e3a-28ac8592cd01"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>v1LZ2FGf+JGFjXpMJWpMUwsa+qg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>OrSMrKDnKD9M1hBWsQIO7DgXa4fFv8gw6PLEZYG4mggkhdMn+Nz8wCLyMPatfG8VUWt598jxWuzt1nZ4BZ4eYOwvrg1BtbApFefVq3JZvVRDno06NGBk7804OKgIcbb01V0Ms4WlKfYTZKP1z5KkFEKSejqjzUVxhT/lqj/6/HE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>f68Gy4u9f0wJiczREjJcmCDaO3orEqntMRL+du8UmZTqxN/6278qJ7R5NuJIexFdXsIOdikJidLW2fC4X7yTOoU/P1S2yTcgtjDbHN2MX7lJ8jtQCbJxA90R9sT4a2wXl0T847447LV0iIyneK7NvpHc/e+NoF8kLDTskn8i3nY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.