Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx82509b5c-ccfa-69db-9e55-179daf935bcb" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx82509b5c-ccfa-69db-9e55-179daf935bcb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>gn1uLu3f31/vrejnW4r+bKdA3dQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>XX80oxsrY3sumYXezLQoMZ47gDZkWvRzxi3s/gmmNEdBRlied1kiX1LK7NBinJZeze8gSPC3Iu/J1/IVoDENoAMB/QKXtCfMzXmLztTi0LZK01JLuUl644Ut+EwWB1M89EGI4i6fq89cuZuhWJ3zSxDDmRUxXQhUPAwYiEe0raM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx03eac425-27eb-37d4-7a0e-6ed5b4f7e1f8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx03eac425-27eb-37d4-7a0e-6ed5b4f7e1f8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>NcgoKQpRA3uTJ2NKvlWlMikKeeA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ijvONmnQYQCVzHiB0mv2mc2JyiRfTZW+6wm/J+Cq1ePgMARHz/rtQ0SqryF+N7vTEu9aX2uOCFrR/6eLFFekRw5u188EhmhX8lFdCXaNhvHI0MUFrAsF4xetYvpTNz83hnNPHsPZAKzFe6eLgh+p/xHrd1Xrih/BDknTXzoTbMs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxdcbff3d4-f66e-2b8c-caef-9f18a447545d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdcbff3d4-f66e-2b8c-caef-9f18a447545d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>1j/s8EA2XzJjfn9YoLu3ifrGiZY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tCnhfXaC+E/eFmHXgR8R0tvBuUuwAYp/sueaHnqrXkwLLV7ZFy58ehVqigj04wTi2ONccRtQfUezScyk0o2SYzfr+dDCP7FrgDnBxO0jZFFBWPJoBVYFubkyerSTPPT0WnoWi73hrL4NAs6DNNROYev9BfMVtSy01J5Dcc/xl5A=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxced85002-5fa1-6944-ee1d-ad1f24e9384f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxced85002-5fa1-6944-ee1d-ad1f24e9384f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>/NlQ1mODVk2dQ19RSfGGqXQAeZM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PhxmuBPWn9iDcYsUXGpwPcxb1sXaqbxyWJ5LdX8Rlrj//4ap/v0CmHVP711vvuqm/d+vuG3Bzep4wzp5NyUP5+C9E7izza/ywiVUP0HqO1icviwjchHYgEpuomeEry+nq6tvZwYwmEvbYi4J1bdLid2hypXaEcu3e5gYd41jD/M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KQI+J5IUCu1yuFBTG2vD01FMtrJyi3Nz8uHiPvaDJh7fRnNJT7DZ6snaJlyTweQEox9v4F0t4Yb8pfnE3zgHueW47watrp/ozloOnT7yhFaD22vhVpcYhX2YLGlt2uYKHfxRst01f0Lc5STyyw7eNUMEKeqNOz2wUdfQcEPfifk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gdzvMOp0XDTdgG2htxMg5xejJvs1j8XwMWrXYzGZ5Dky1ebu/fsxU+cGTujSoLWm6TprITmtjy+MScYa75Q54SmlC/kDmTsBVsxBEXSIY6ULentz0Gk2rEs49yVLm/+zRGVaBmhx/yzx/XjAjUQGsHbtM20kCbDEJkTP7/y0tVk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>WVsXE90L1k7t9uarOx0V6gHioaRI7EQHSMkYFRZmGKQ6pgtVH98gBzTXhayywwjNValAJohni6uX4ZJ8tAqNCFmMOvZCaUi/F68l7p3Pa2X3UQwJy4iwRtBafluT52lEuVeKp348vUUXxefUGkBqCVbNHfpdxdHFs9NTlT21VMAfEVI8o7uvaKpJq4BMQKUSsh7fdxzXxNhiT7tMvmdhITRmWw7up/MPEQkTQgqTGu49SdLSRfXZeP8mRFZWuQ6nwWHTg2FgtL+8qitdfBg7+oqESios/Az5Ygs9kB93MgXW+2MUYvLQLSYMJ076d53EEw6u4ppe7xPK5PWsYDQ2xRiF/vTDGXHEP2lkmh7NVSq6bq+6KQXxhJoit/2i7sjPFR0x5aOeEp9Aatlywl8HYAdj6FpYR/KFK6J9zt28E2Kx4HoxlJ/WVkqVdXczNAxKBoZIY/FrRaZQgNSuOXNaB9WCnKCl4AjPIcyt9VVhh5J/7Xa5cFvl117Y9Yn2h9dycg2LDJdoETb1ZpxDk8JG10pHKBSmjM7/qhfi4+zSh2a/xpkuF63VcJsbF7xaaVPciJB7mCvAyXZGGW6pMbepYpF4VrioDltsBLuucDeT384aGLkm79lJYebzncsjQsTa/9JHHWdHtdkN/O6uyrfgjd5ziZbzMuBCa6ZUmdZMlHVPIg13sorAOfBJcfNk9SLLHnk9Wn694JK8GiWpIRnrv2O7Y8u1bkIlFAcrSf+FBfIeexLvQ35y5n6FUusHY44KivC2duFrPx3/I2hZKT0ysqOoPaEM3EZqng7hkWhJd5h6L6x2WwazvXLm4cFBeYlXl3LaLT1ADbWlj8pt5DlhPMSimiXeu4NPTfonfepwQwySS7OWCDNVk3LPLUFnmMoOzH1VFWtORmTIywuhNxnJlxt7n9/KqVkqYzozuYnCIAQuJ30VN55QlaNTqHeS4vxEcjtN9KDiyvtVsAoXbdZurhiD1EibbGqkHtQc3O8T0K1CFIasGdF2JZbmKa5eKt8iJ9lnxgTHzEGpqTUku2LHOnln1b8hvclNzfmym3zHSYHlk1AfY89YfU9j6dIQh2LRb08oAQiEGqLnt2sg71ciqw9CVzXsqxv8ofpuFCJQ365cKskp05S76LZkshtsbP5laiIIcIS/NWFAGN3VjPUwZhM8lYJEwLMfIXTfEMPUxGH65VkVpJgM0qEzbolP3/4KBtYhFCjWDY4sJUrHRkfQs9JqjSyYas4EMCd5VHuarN237ydFKpIELJwyWVdAcRIvsRJqfsFTzuSWYqggAAxkXZZpa8u1DSIBJs9ZoaAMplyw69enPTIT3GmkqgRPBGmM+gtzxCHRLnWF8JAaf4i/3U4m1RvcOHqrLON4jlBmfUihgl+bWEeWyGW6TsIRQPOBGFliR1Tut/6R9qXGr2VB6/9khgrAg4nvaxaI7eY6sGwyLD44Jf9yGu+csytss4RwM9mlyJoOacxIXtOriRDqq6hbCRMtabaZTVqN2Zo9689VxBmYrj7Lke1+7D6gJIWEyWJZJtT/ksP8gUD348tSxF0A68XuHQ62NLs4AuCWNM/fH0cTAGcwMDjrGFU7zGkH14GvqJFH4NEpYwIeInvK8o3mtbK4vHOv1bu1kr2x2j3D/6RTPBDY4RRcX/4o1SDqUWJM9RuzRW8240iP+6FdPJ1zs+89u4yBl76xC7GuoqngQUWghyzvdYtgjZ2eHHrMylBXlO0x01fN2oJcaI4AMM1fywwDtM4v20hozydXKyNDoTV3QIblIedP+8ep4rVuMsN/WvIydr/i4DdcQfHGwcSk44QMvWQBvHulgq5btf+FtFwFEWbbiD7MbP7CQU/D6wi1ZTl/SvqIt9c5YRy35fOBP6OIM7ZZfbkunNn1ZGhXuMPVfTFmVzyas93nUjlM1fRjknmFzQiOw0MV+n2n5WgchzGQMzDHGiav3JhvOtpKapb12VrWyT80/HoH2tkHnfPASSy7IK9O1cid6tSOzAdPF6M5lQOFsLcesypiifRo+PF2rxwCE6KPaRoDZ2mFAnpxp9H10eXNRD2+7/NSEZgp1dXa9eJEPX33+f+l7X6siTu+r1XgQ2Szf/6cmPuLpi+6oyKfgXgUUxWcs7oK/pXsrqrDjxGB7vZTxyw0Xty6fLrHBZnN2AGuuxq1f4rHOUX8zuNeWL8QwlkW6KRL5y72JwpLcnJGTuztTAMZndQdblDLQuDHNAOupElovWzfPV6KN+gvESUMRBUJRIViMBeDlLwNE+BAjl4JHBlm3lfykJrBv0PTHABqRvvX7B8rNg/Ddehe8/ibKZifzkobmJIK9PIWRNpclzGWNyyly9IxihCghHCaHfIafdTUIn9mVzgO8OWKBuWYh7xbo4RVfludNlNRIR6dsfg44Z936u+4TIqS1kpBO6W1NtZlIwlUUSuWI1wfVGsoIrGU78i0FUlhY4cB1x2ubY05gl7qSeFkjIdlOe0SPfPpMA0w/Uebwe8WNfvdXcvNcy3EmZieLAN4Vn+pBmHkky4moeQTrEz0pdGfMg13wGx4F09jFb4RrimQ8CAlZ1KLbi+SzwKWakXqBNE/CfF/dla2Ima9SZhlG+U82lpIHDQQptN/pGqSJYP94yGpkpG84gyVyRddRo3+OmGYh60VAJZh3sSOhJWRsdDXFflataq/W70TsTUhiHmebZc4HYC8CwsC+gskALvbxdY3WCqjKOs30oA1VGh8OrjBwIaghX6yUUVaDK+dlT01BhOR9UHbvZJyGMZU9a7v4wv8O3/f+dCNfCvFAxmPsu7OGumczMc/tqV0PAijEuWtM6eJ1w359NChlXa2CwkxMFn5lJeJSzbHwouhiutRXWrcfstKXXKtHZ7D2Nm0LelB3KUVbhZXGTeJBFf8LzwJZCIr6tZ/8pp987//9xvfwNJ9F1dzsxyA9hvbpgzGXjbmirYzjakUsxf0seMFU1IuGoCVOVa2+SaiJaShNMXACguY1K8WOpW2FczNnYYwC9wBbYExQgDgDsIkh2ksDMFlhmbPpCfX7TFGY1gJlMyjceRJjYpo4gOlwBfhxLwOQvLpEihsG2B2DqNy0fdIf1LH2BJhGJ1o1wxraKQafDidDpH9MmTX6ZG6Db40N+Q5Ujl6K+W+NW+IQUiwiZ2RiBNMZi/ZN7yHe7oAYnZq1w6X71+gOj18tashoKP+1PeUs4Ls/yuEEc0+3EEsb7MkUPYLQ72f56Sx/t9l7ixk6KYsPIx+Bi4+nlopdueR0uGRyZ0ebICSJLg13Sd4Hh5QfCsKwZUAkknNwP2ZLBYjMADeHJivTthzcXZr2hPCWcn9RT3d8tdEHtdrE50rB66OPwYE1DlRNgIC8p1BVocIUzDrJ0lppqVFiNFHt2fdnSkyowBa7DkeKQqjYVfePPCbIfhciM0mpPm96isGqNSFiqmos1OZ7NNdN73T+TsTz4OfFYe3Ynx6GgwNniIZOUIvmfgHguDiwz5plPy018/TSSu+UV5feuhuwoZokG4xVm1FgwULTECGO7HhqMuwfYsjKOc2isnzzUxp3jzfh8wkH71JMLNHrIoCxoobn7FyEddU1kXJYpE43Zb5z4sVLiwFkcQu8TaCp4Q/SCcxioWBXPwuR0cyVpT2ayoYkPHrL4WYUOV7dm6qRkz0JJjQ8ro++e4m3SiB5XvFym6pQOy1CFALd1ffOX7K+Lb4ZukjC1xxiKiLAGyp8FA19XhMlU0VOhh3peTyfpA7ZAmEoMVLARlgGEmuMQjRdqYz4aC/1kIvoRSuPLM7HiWNIFMOTPHzFuIkSGu964pxfNOx81dNbABX9P2QgRQ+iGQERfmXFE/2jZCXIAFE+c5VBnSJQ8/+oL1PNjEW8npKOonOwz27ROG1D7T+yCd1PFqaAmFwH5m7X1mwBp/PPo3ReO5G0Fpps3dMsmBHd5ZXoTdj4QWouijS3z14ycel6bjxHBzvLFBpwHMUHyH+bQd+nl5fIe80YrlwJVuUcLuqOJ2JHPEoW05/pXYhx27s4KHsBaonQh7WNhU3QEW063xCi2mPMGicBeF2ZbzVcClccERw+VcyCc8Y5MJ0I7YR3GDP+xyehO2+JEK59sxcbpQJj9eEqXlcvR5aKvXHmtiQbSStQs1IsOOla8nuoqtvLpeYFxhHfGxXn6fSbIZ/y4AjZsSJUOveLi+aSsFRaWj0mXtaTFBjnzvylwJTHXlwTXKskt8G6FUjWMILsaPcILTgMs86TYmb/eIpF5DpxAq5DKXjyDHJcCiNzftpU1j7jQvtKVFFEtp+79Fjo4DZGGMkq3qQJIGc2RtoauVKZUuVJDY/YPdhFuSldiyi8neiX4l41VItn+OfF3ae+msaF4GgemjRarbh1C8i/majv4tQYSj1bzK+TQB0Txa3Zz5T2L8TuxB7rrF/AaOCwzAV5KEiwNX88eKhRLGy7+xNWcrhwZ26JQYysQfgEY4KGVVPJYw7PAAZbhfNUKACbt/TsS9vSLq5DgtGOsETzS4nhw1PaKyceA3bnC/HdZNcUD8keTw0yqEE8pfX8wcu+MtsjXt4IUGiZMExk/TWm3Pj26IjOSdvpDkW20HJhzJ/rYlVnObZTbs0n1Uw9kKUnawPJTSlPs1E8LUN4he8Tl8CdCW7ohKpNqdNhs4+x9VAnoZWIDQNQ9OtCo3luqwN5PnS0cUobQ4CU8CGan/KoMA4YqO8JuoNZlFqSWrgKsO50qAfdnN4/pX2nJY8XvnEJGy6FftlXxe/bGOy2aV3cckOafrOv13L5hLorEUexF5uMgzjQSs+ovv/TswfjCgb6B3gACzHIQdCDpBqs5JLGSp4HRscoFQF8M3mDbZRwi1TynE//QTUcSm4nZudyU758ipuva70AEWH1a9L3ublVCcbcZopDDzEG0PlRtMGSHJUOZ3lUkqaxDgG9cEFnEqLV3NePjkYbZVFtoLDCKdRy8tDP0G7qYtCvpO9Tnn2YJ3Bq7wnMnvIXnUsrv2C+O9FuCm7P01bW9H5tF1yG8gOnpA0GYlH3HgzSLUaQ1UcVgX/ey9wufyyMJkBBq23pwPUfWv2PpPApmcLCBW728x7kbkXCY7b7L1g8Zg2G20ruP+eHum/J6zB1LI7xqkM4HJBfCrqEatGNmPozMJkrZAjnHtQAVfuN6qqpKcvLXPpa/o2/fU76JSQf/QcdjAGgbFJ5YMZS8uhepyeBdCxtT3N+HxV250sI52FEyEYZNA4Ol0REpwGacWj5+/oKjVXUEsyoQGh9Z62CLkzuvKINZ9X+1AlfmOl4/DBWsU1rkT749TeIPb8QcOLcJJotmgzSCclNewzfF04uzHC8FeA0mxmC5tvrneZk5P4fiaxAYiuC1AkdxZdYSo8YIlxHsmO9GUCC/wwpqcrLaJXRic8SCnZKYYx7xGbJZ1IhEOHp3DjtmBkoR+5YcusPgMseff0ip7WBXuTF4+g0ycRZ+WYHr9zpuI9w1Rt2Cy+kD5Ceng=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4e7d0053-45f1-7114-257d-733dc1ce21b2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4e7d0053-45f1-7114-257d-733dc1ce21b2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>je2Wr/1FVo087r7iZPRas2ay1w8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>RtuRjktAEne7b6AgAZWFWMRpotpK/Ona4Vcdo9hLz28E9o/+EA9WmQ5WlT6SEmWMI6hL8ipMdF0XRyH4ndzLkLdVBmhiuWrigJj14MfnI0TGRTFRGmCZga0hJsqjAsYVWOUibiny6XU/bN6oE9piXB9WdDZ8uNAViushh5YjJ74=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KQI+J5IUCu1yuFBTG2vD01FMtrJyi3Nz8uHiPvaDJh7fRnNJT7DZ6snaJlyTweQEox9v4F0t4Yb8pfnE3zgHueW47watrp/ozloOnT7yhFaD22vhVpcYhX2YLGlt2uYKHfxRst01f0Lc5STyyw7eNUMEKeqNOz2wUdfQcEPfifk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd509b5a4-4807-0395-57cb-15910611cfad" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd509b5a4-4807-0395-57cb-15910611cfad"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>AxqRZWHUKUeGItDneors+6RHJe4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>VOGDaKPMLm0BcoAHvMyg+XbCIm9j1IaQ31YMF4/GecJSmoFZ9DjUx0zxuBx8lbnah0Z1CqQqNSPuybqeqN33Ui8RYK/hYkDrZ4V8bG0ccwAgHnck1NI4B2WszhjEVX4re6Cts1MhFg2fK/6a+oYnlmvC5TYkLQCc4CfSUMlsYSs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gdzvMOp0XDTdgG2htxMg5xejJvs1j8XwMWrXYzGZ5Dky1ebu/fsxU+cGTujSoLWm6TprITmtjy+MScYa75Q54SmlC/kDmTsBVsxBEXSIY6ULentz0Gk2rEs49yVLm/+zRGVaBmhx/yzx/XjAjUQGsHbtM20kCbDEJkTP7/y0tVk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.