Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx439addc3-4938-49a8-eea4-161d4e6157d7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx439addc3-4938-49a8-eea4-161d4e6157d7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>D1AmNEvNHtuCmzahJzbvTPKFMEg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kAvH1bsP/AqZoaAF/z5+GrRmdhln7Un6yljj8FBnYovis+/L3VVBV/z1MNPvS23UwRWREjYnb2rCTEhtV7sNhgkKeyDZYxYKxvs7V04fd0xoxuMyClLG9pGmleLvQ/i0BxGd10jpPJi3g7sNHMcOzYMgL4T5lSw8QwBk1HGg6l0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc40de48b-64ec-2920-f3f7-11a3860e5e97" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc40de48b-64ec-2920-f3f7-11a3860e5e97"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>rIJjKVcGHe92aR5V5rnvkmi4Pk4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>uQcS36o9bCsuhxdobCbGefMzYDMNEygFP4vGJkbNyCRkYDw3W8sLtw7+/AyTfx+YCPxW9CCbRzCcyeR44qHtX+7cw0PbEgF2cW7Zq1LvbuMNNxsTLUkrETmr6IovhwsAzCYk0wCqBL0GmaL1Nuc9CN8v+e+YUJyGQr+r7wzg9FE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe4442486-8b87-0945-d56d-e68a53e9a5e0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe4442486-8b87-0945-d56d-e68a53e9a5e0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>5IzNXgb3LEgvIX+PrdX42MTFVN4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rPY3vQOSok3s9W+/cIYbzXejB7jN1TJ0UlE371TFcyL+4m8BO44PV6DNQ3Q6IR+U/cl6tzfGqmYV5PO1jMrhrfJG+GuErU9ov9aaXfHCsEWcviBMD/WYowhX9TpkwzN1ZQenZrCCkdVC3SdA7hrBoEQEnxTmFUZSSc8+FCTVJXw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx48ff7f1d-e9e4-7c96-fc9c-232cf0499460" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx48ff7f1d-e9e4-7c96-fc9c-232cf0499460"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>T2DiQOG41XzHDFCWWu3D9bryJmo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>S9LpUGucgvx+LrfOtvYjHSeXVdN8tVCxtLkiV359QwVJpHz+8FRmCz2VMvY7Y7gYWA1jQU8Jn8QqwJqftAl+X33Jvxo+AtItfmWLGTGvCFYCXK9oBOCkASiuIma5jWFZEJWuMKT0Aed3MSenSGSTVHAJZZ03z0SXQMa/Q11BqRE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>vTd6xg06S+VsbJeMdirIBEHZV7y3Eb+M8IO3p+Fk6Da36c7CG88XoafWUne0OOQnG9JEov56PMhE3YMJ5EBo53daYJ81p9519FA+KCXOrCQz1Kz7JLMLXUdNd/hyJ3Z17Twj+L3WuCXydVqMMEnS1R0FFY3Xj/my+jif7l++nS4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PrzCedg2qg/AvD5ywq3sjEu8XcSTIFNtJCNH9VR5WG0LJVsYcatEx2m1ENpWuT7TQ/Iw8RW6FtqadvbxW5S5UT/vGTiW1A812s1Xw6ZKIXUA00nze6D58F3sb6Pa0pmf11YDuc3WGReu192PBfZe6gnTfzGNL1dgibDt470F2Js=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>8l5fo+5pTVX9oBMEJQ5oUhT4oUSayIFna6ow3Y99B64AFYdC2Kr7O2oymhw70LrCdjVND2pwIWvqNEjVAn+MQ7fm7OwBXesQBRBDdKszrE4jNfaWaLQmsXjGx6aDGtkLiCYIVnWmFZUhwq6eDVQiNU6yAG6GX5YI6BMzyZmHqxuvx7dyEbQfmRF467aP9kYLa109mTsOcuT7h8rykvmS/w9hp7PV348KVGQqPsZBwZJL0OZKgwd/FW9m6aRGssxRjZ2vXPUrC4dTOWv/9gWZ2Db70Ay/PX0rufe9ybkt1lpx5dRpOmLemX/RmrmiA9X13Do0dyMFrcttpoKm54WalkAulhfTg7ZjYuPTfM6HbKFtcTgmMQf4JnqX4Q3ga/80kslsRC7Or3CgOeoCCCnrDTpd7bJ60kluVXs2wRlMte1VQFiOgTfo5s52DrnEwje7ytSNiXSx0D5yWueDFSejE5zptG/yf3fHr3M7K7rXDms6O5I5mcYBDkpbsUDD8ieaheGJiLnzz2H1m2V1oj1bR1wwbEO/+7rw+ppRlomu+m2KS0BUEStkezirgsd4ABUqj4fbjtP4A9RH+DoKtvGHvr8G2bbSXlrXgS8Gu7VJrcU4xlapINBQBswRR5DADpVcPY7CSBgvkXe9O2jxDJSHO/LyoWaen5Fri/wpJI8Iedltbh7mM0zvFYHqnxR2K1Lqr+whLnDZWgCzpTE8OjDPe6vcp4A0bRcyXPIO4fyxEWNrhFkrrpDq14zXA5keSRYQ2X+fpl3idoOPpN9XBBo/xsABizaYjWH+P3n57tkXHcCLFn3gXPIHqGfubkDatZVGg30IsY6VallAgRrgsouF/UaAvR+xnReu+qsvXm4nes5Nsj//6nxHnplGmoKmuOhpHcBSgIGXqW1p8rMzn5lXhYiWxHwdWbCwAAMWUmMZSzAbgRWyUvgDbPLp4Chv1ioytZDa6ORlypJ94JOadEh86M4lattmKdXXBMde/ePfP7KzOku3jpPbiAa05I75MXPdC35O7qAfAI82Bfxaezx+gbe05UuFQw0phVgv0Y21NenHjChFy0H1P+lxyGSv21BZUrOAuFnfdh8DvD4lvcJRoLD6Rr4HNCJ2JylaMlhbjLs4P+BR7LILnDIBLmwFz1K3XkxMR2wvVtt11eq41zJBQcQz80cew6yKCHBMcKMThvo9bQ16q+lZ9cLfkgXhJTqbAHGmijqbkGGL6gBKFqtri/Lcoe6t5qg9U1Y4BMrARuVTFlcwFh1vstZSazCVxYI9J1I/8H/g+/2MsJ6JGrIA6Eh901WfLri/Erz6tMf6jw03c6eFkZ5F2pJvd2twWoJUAm3TcdyvH8y9H5TzPOpTw6K88Ad0Qun/QNGb2aLxgOE1RscLK8qlYGnB2+3YYjcoM0p74TbDYl5RDhcVd7F9iYeqqE9btWxhDDPIb01QlR8CF+yxSMpG4Atd6aFPqmI9k3e/xyZaNfNtS9KBP/EODRU39qfcFtFtbvL/CfJwltvl3xweGDlLO7zLnCQirqTCBAaGdZY1VMo9pUcETZBBqSbCHfO/A2q71ylJRhkcJv6T4pegZLkwIyNHnwYx65KimIM8qg+aT7a1m/dvLXnbIMeigulpOPxrn6GidivGYBwyk76iDzA4To20VTAixsgmOhk5+mVp1Qq+O9E7WOlg2RGMvMNDhUfdI9pl2bo4m7PU2PkavuMFsGUR0theHgOoK/vluDJsRlLZcUUI5liVurgzohzEAtTs9SwB3kNahoxnDGZl2YtQfIv+ij3DvjZmoz/fuPP+hGM6T7+Mp3unQS2xAWnPLBJrY3RiiqwuHPwZITx6ILrJtg5TBaIDBAu4t5LpMMBer5ZlHYtqCihQ+53LehSJybUBS3ECOUAZL034Dz15oVPUH6sRY15GcnsrurN+xVAE6GsdGJNnDmWzQCsRJqhKHpQFmU7KDeuw9kTyJeK59Zmq6bLp0Y+gu23vLFqhEJQNud7pnjYfcn1VQoDEhNywYysnKopjjDGUtb4aUJTdYIS+V1Zg2mfXoMBSfdRbrBstE7aBp/+Svg/5rt7Nk+JydUeV6bTDKP367qa0JvVshgsiiXzmvrTsAMy7zr00Ak+FFOl4wrJSYn0+a3WTG+6nM0HyPbjdzWXUs2TgQ+x73A1vwcJ0aMQpqzi4mkcF++WpwyGe8Wn34H32OOvoRlNb6NzdkKhJU5/Q4DSpQ/cPoUAEOUyJLmUhxdcq1z8XQqVQTqSTIGYqhCpoEpLc5AgVipnrlYufBpDp1sB3aQYHnWweDD1z4RZCoJSnKVgw49LskbI9BDpEuhSAotmPE5/7sniP/1pxivDYySc83JWjjipH8tvzd3PugNrNC+4e3mgldcTpv1VHaYndrlgW48KLswiOUkXL3At/ep4bE+QXs8akM7dHmdv91Zi42bZEAJSx39ERXrlCnnNIKd112O0a+aAtXwY/YComGb7pIuB7VT7awXrURXWtbuFJgKABhpVy80nYFqjp/n4HAOqnvXFlPyLYBxKTqXz/VCQVnwivwAFKUP6yd9WO8Vu6/bzn3uDIlJILpkYWg5+YoiHR1sqk0zzPGnSdb97ZSjb6KUFDF/DdUOPH1GpfCdIA3OaQcCDoO6v6tnyzRcBQnZr4ggcV4SjPzknikpt8CFOf6XOvoohr8/EbxPRbv+mZtzngqeR47fyLzpq+NAzdkYczsv0xlXK/r5UIvkuzwosHg3LfRegQHGkvdPwA+ndS9feJkIraqi8BrTYu4AiU2Ib8hFtAG1YmzVD0juln2ieaokDBuh/Lfy+1iiaKQsdPJp9YEpTJljvyJJKKvwRvCH9ZRXS8u5QNTK8jkmdQTevdDJfOrkf9puUqc46v0d6wmZqIclKh67D9i9MJyrFYSV8l6ON297K+rHZl4e1ONfJKXRxdHtD16QpMarIy3DxlxX3/hAqLYIzcFxzaLbnp1GCiiQP4p2LNari5f2lADPTE+syq3ib+JRqMQ8if6f6JoZEI8pi2kjYV0MmfkO0rizJ5W9CcXacgzvFrSTq+wC2WaXtipqKgnAGgUeu5nLbCwvZF/YZmJ1QlJliyrW4XUVojKRt0uxSXzuvinxj4iRWlHhQLn4VFr1YJ5vScLfBH+NUxIbjCogBBQjBpSMcC/BHffqTh2ctdqRnSC8PKC7Sr+a6joGBBzgmP+1DlWl08ky0e3us5ll9BQWlWuAd00KZ6UFSawpJI5Otf54P4HmCM2J5XBAccfs4lFpVHP8S5aef79fsGQXYYlNfctAYMKWbdTNFSbq/9JCofXxq7R/kpZofNbUhrwwyRTfSsAEH4ik/zLPVPG5vQAIsyXMbX/9DKxw88SMQP7vTYUaYVBrXYCGwKyiQ+T92eSiQNVYVqRseJGjSMMDT54FgDBWbWVUJV3K0wYEtqlMTADtSAbSEB/Hyb1S8bVyPMLYGjjeqsAGUXWRDvxsKtZNVM+s6Fm9eyl3b5N14opoO4xHTdDF2P5ti2kKZ04Kk4oH/TiOizNTAgUG8hJjlQnZ4NJfAKVs8mA4hB3zxCO9FIG+7tjALQBYg5qbnpmjWFhpBEQ8pYQY+Z6ozio9jGEFge8MZDJY6M+NrIQEcgghuIuPf7+j2ocQUHnfZt8/uD2MMmZHIwv2EuJHyvTL7R+hBDXIe2T1fME49q+VB7akC7zLeM8GEt74/XSQHvq1FWbf66xKf5qDTegt4mPAPa4LOkyqliCU2UAGt8SapyN0euNiKSNv6rQPwjtilZKOB8ncw9ILMvXFet5yfzU77qmiy3QY17kEEv/qZzWlYWlq8XbbDfFPIgMzgCZCI/o8CydGWxJ9fBjwxjXTFDWvjMcZURS03lKVPwd6lkYdpffTHjk/HbFWumbTIxKH0lH0rd90mRLsOKWE518Bp2UXNupEJi2DqisT65Nm/gJe7MFQZrPGlgTeXHeF//2mTKWZrJ4F55bi56kbk5uzDlw5CWpiL0TXtGyeF9NvAyqcet7ilohX2H2feZ7zZtlQcONoZYxM9Ynnix+/iyPLpMhCrxW+EVyrJshX7laKWgu1RUfBX8gMMLcJly2KRTcPIFa9AxyMbK5totR1Ng/p3DaW4qXVVmOpJUeCngTJ1RuPwAjwRBbcjGv9x5ByQ/iyR+h3PI0vv1kjbSArcP2SfkHHxsSvwHh6hQDZovN8y0F4MQk0ZpT6OsFvycR5vkIm+WRjvIzGVVvVAIL1l6Stf31cIBhABloWFo+b2vVxDrGWJTqlRyW0LPc4BkvaWMxHuDDSPZWi9GKhfFYSLV+6ZVCsMMf9kiApeW6m2cyrU6dUNtpNL9eXTsIHLfd61FWgSywrkik6U8iQw8A6ha+sPmP3tLwP2TN8AT1GWKi/LDCcjQUw1hzwjjSNCN+mAgFe6vcy2CxJGd1K7tTZ4xlTeUIf70u/pJWBFHVk8G8CA3WbL5au3IGnR+ELXnAKLNj815AbW0g2o2aGXVF/Pr74NfqK3yYhnLbRe7lRkBvECeUdK7vEZ0CcHWqLJBelhBWdLVgkVycO95rclwrsjwMwbThM2z2133LIuS3cbmYGjXHqhfS6L0Mywx+fYa5EB8Y+h4rbGedAM/qYrKpzDCa9aDIhYmZY5ckJkObYEgsX3pVMA1BowDPy7PaUg8CphXaZ9LwS01XFVK7gOYesjnmvamuUfgsY2s3SeGSp+qmjksszjlpYJrd++1jWI1yATWD9e4+H7d34hqZx79CB+axM1vTeAz5Q/4Zl2gz73zdibjcuIt0OolAmFTEGZkGAGNpVbiPClZo3K4wyU47YrvtYWSCiqMBt8ED7JNDuc06rz9fDZMuGcE4wxf5DF3gUinNOiWWOmctDPs7IUMzMVUenhkAhDbEkrcVURYKnH5EJqNCFdbwilRy8A0xT620ehVOTuOqfW7Nc85Z6e5FJ7rMzqT6CXurcXAWTq56AkDu7ZuiqSsJJs0s7Cpqe2EEclpM6SbIfgqcP9lQPSaRbfvQ8/a5bUerQovBl7zy0x2xq3lHgnusdRMqq6N6wFqnYhft6WhR5WMa6TRN3bvfQzMU398l1n+b4325RZNW0XdpxA2OkjvAhyN0VdzCcjovop9w1RIPcOlCXXJIRbwYMDGAmbyU9kv0Hj8VydB6uBcsCgag4P2qyR+mY6ktfZyzBlPaskJHvneelbAoeamNP4/Gn985JVUGg01fybAy33eH1CmIK00hoiHrdpNc4942UP5Ik+YrCjlDZMud/NN1otPMkjpV8jMh9sVpBOO9fWQu3o+ujmfSCuV5KQU3AD9rnRyFqk7VARmYrngXB8K1qNdla8U2UGbeyNFB5vc5sGnQnRsOr8ZUK6vt5K1XrRWefwI+n3EJx688Yjn2mYAOHN9VNmMOz89IJJ5a3Q+MZi0oLp9+vZ7yeFuTgbMnXQrIEV4aAcZx4Oi9ZtJgVyFRQGD1McGgoEkKGcyjDDe28HKey1Xb9tnwI6fKmfZKQg=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx93fbd96f-b14d-f64a-775b-e5b07b387d01" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx93fbd96f-b14d-f64a-775b-e5b07b387d01"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>FTcHiBA0NHpsdihsFB/MRdMft8A=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>jbJ0KHuEV8ICyYa8WG6MpoVuEtrNQei22IbJRr19/Q/YX5q5qyxpt9Y2/DSYgEiNvlyowBZcsIM/qXxKjPxwNAGHgOqsb24/0sa0K4oOIIuqVTLX0+wh40I3pt6ZtKM03sHOvJTSPUKMe/4OqHrDB+60CZ1Pm/F2OEUJ1zn6wh4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>vTd6xg06S+VsbJeMdirIBEHZV7y3Eb+M8IO3p+Fk6Da36c7CG88XoafWUne0OOQnG9JEov56PMhE3YMJ5EBo53daYJ81p9519FA+KCXOrCQz1Kz7JLMLXUdNd/hyJ3Z17Twj+L3WuCXydVqMMEnS1R0FFY3Xj/my+jif7l++nS4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx897525d9-c0dd-154b-d5ed-e23c0ad503e2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx897525d9-c0dd-154b-d5ed-e23c0ad503e2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>oPoSV3+vlgB9fD92WB32GSlHNys=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ATjF1Uf0t1aEzUOwVdsac1Wiexkg3LQ0+e2FYed04RQ7Cs46u+744m+Ppn34qTQEx8zysgZBzVeJbh10U2Sbwy80LFmzeoD2b9StZAZnVAJ6vR/AA49peE25M2pgLUjKn0oy1LMr8yY/tVADT3GwznEcLpOmEQm8EjVpeLl9edQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PrzCedg2qg/AvD5ywq3sjEu8XcSTIFNtJCNH9VR5WG0LJVsYcatEx2m1ENpWuT7TQ/Iw8RW6FtqadvbxW5S5UT/vGTiW1A812s1Xw6ZKIXUA00nze6D58F3sb6Pa0pmf11YDuc3WGReu192PBfZe6gnTfzGNL1dgibDt470F2Js=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.