Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx076c683c-ff22-f70b-72f1-e81ed1a44e4b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx076c683c-ff22-f70b-72f1-e81ed1a44e4b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>p9REIg/6uDiMECdU27BsPPvkcS0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>DNBlOxAWxQnDtljx2Gjw8Q12TZw+XVLSofoJI2OSi0FZS2Me18KMMVrilAG0/CSa9Eo3jKuCE//ne2ahTr77A6DRhiRgfjnChWg7jtb8nCG2WsydqlqStOCmNqZL7fsXMDGQDXV3sHDEQ+VK1Clqabo3W2KeCdUqrHlAw/WEXDc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf3eef378-4feb-9505-180c-71b6b7bfba75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf3eef378-4feb-9505-180c-71b6b7bfba75"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Z0+WykYKY52zQNg5W20yqPeUHbM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>oaD1RpH/7cTL/TCVLRtapdktS5tk0iF8yLTJzuBbqRqVqXpGnqC2IYu6ArBI2OnRz4WD5DkPPZBa181RmeM5N8VfkmSzYgEGJ9ohbWpCvnyOnEK6FCT3g5u1YOUB/wOB98ugeVvU0im68HL3R9aDUEAEkFfKz3DeZ/UlUwLbpaY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc0ee5a67-b442-0908-f1fa-741a09a75ed1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc0ee5a67-b442-0908-f1fa-741a09a75ed1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>OVyCR3qO/xWTcEALV3eKuE/ZhCE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rj9ZUVm5CslprM8gIfM08PqR2cd3EqkzybGsHYLXkDM5czbMqb1Kf//flaK4w52tE4jEeJUx2fXfW0jNmg+iLs/0Eou4uporCCNaRWIf6IheV+pUeIJw2fUvFd53lJcxeNbh9SWzOrZVGiMIdFC4spJo5k26muCzkFxf6GFj8Hs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx932bfed4-d8f3-248b-0e6b-5567e8e13c72" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx932bfed4-d8f3-248b-0e6b-5567e8e13c72"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qjCW1mXZu6BFiHk8JnrZG1ZLVJc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>vReutUo13Kpvd9yOy7pe+OdopkXnXks5t34dHHa/UL8a4qfiYOpvasV6y9VHDyon7hhra4FMnLqcq/wErPOrx+WWElD5odC9XQ5JyndgLa39oKsl9+tpjmw2q9yy3gk5VHWQOvhsfxmh9uYQ76kr7LjnOB6WhmUAxqyDOu77JOs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gOG+LPS+kTO6zcfAfpCeRSrB8EiWdulqXaB1pCLpax3K87oHB4kGakVVnExzweRg4xz1vo1AK3ETyNWSguFWtE6Z6Ckw0DFlKSRNri0B6IDT6/QSi5OSYKPk+2Q2siWPosjNVpxsm/0A6Z+n25hF8f0XFrOR8ccs32vSXUgUzKY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>GaeUNScyz/rRR4LTvVBOfufRWlIDM8SlBdoww/GpaRwkw2Rm5pqz93wQbZrcsvaJZFLHJs0CNlU55bd1nQdqDSsoIFp7aUd7RYDNtPlNSrleyopu23PRbktKruUHsGf20zIbMAApna0vlCllSym09WFxVzUlC/xjV3gZHWzC9Nc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx31a8ff78-ce6b-cce9-0341-f9caba34cd57" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx31a8ff78-ce6b-cce9-0341-f9caba34cd57"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Rk4X1QjpQhu/6EnQ/pHMXJ4Ha7Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>mxThiZAZ3hxBKCLm6ObaR2ROAXlWorgPcAv7XOK4Snz8DwCDNoXEzInb5mhiK5qB0B4mDKP3I7c/6Pfz7u73vLHpodlw5f+Ve5Hwz1lQrlpHfo4hNOQ08+sXg8P6XGzlEzQpe871/3H7NMsQEEvS+AbthEtvpiU+ZzFCd7avucM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gOG+LPS+kTO6zcfAfpCeRSrB8EiWdulqXaB1pCLpax3K87oHB4kGakVVnExzweRg4xz1vo1AK3ETyNWSguFWtE6Z6Ckw0DFlKSRNri0B6IDT6/QSi5OSYKPk+2Q2siWPosjNVpxsm/0A6Z+n25hF8f0XFrOR8ccs32vSXUgUzKY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf4c30920-dc48-223c-aaf4-1c1d2a36bd09" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf4c30920-dc48-223c-aaf4-1c1d2a36bd09"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>xfY2xT4HqPs+ADCEvyuXasT2HRU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YvNxQw1EESUqSZJTfg0kqXRwuZcaGsF/TuLDTPWgKMj+KYmMsdNVqKwYaYGOSgaRKxqDd+vJRZZUUhPfZI54GEFX4oe2zoSTcbhjZjiCh39Jn1ty6sGLrpbSGBQOmkhGAwBGujUOQk/Ji6FSxuURpiAfgKEGXRihV6f8fzr5F3g=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>GaeUNScyz/rRR4LTvVBOfufRWlIDM8SlBdoww/GpaRwkw2Rm5pqz93wQbZrcsvaJZFLHJs0CNlU55bd1nQdqDSsoIFp7aUd7RYDNtPlNSrleyopu23PRbktKruUHsGf20zIbMAApna0vlCllSym09WFxVzUlC/xjV3gZHWzC9Nc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.