Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx63df334c-b0c6-14ab-4604-a8d8bc7e5ad8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx63df334c-b0c6-14ab-4604-a8d8bc7e5ad8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>h03hNgetkSpMj6FV90Acvu5kMkI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QAVElDTPYOGsRPVRH25J3CcgaySaKgUCIJKctobTR25ruT14RK1KjnMBdDnNVUoVlGXPevPNhH5es1MHjhk9QJEfaj53WjrS/2F75KkBGwyWMsbsjjP22bShvk26JzkDZ5zv4Y6VnFqM6ECY4JC7CJIyrypblDr0AnrleJYJ+Oc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx96649989-b40f-1324-f547-f842e6b6cb4b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx96649989-b40f-1324-f547-f842e6b6cb4b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>2T0rgJcaiJe1cAHfDJ28j5v/z3I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JcpVUsYzq8Ldn2n2ixv+Fh2Gnb7ZXZtzAT8S8l0HRPvswRHydMUFddQhnG+rLztKVpsmFMB/5iyEdxpB1JOoYf829Wwz/G5PT4jolWCzlKKns0oMZcCAVfp129je+GbCNwPQ3FtRP6kBilziqfH6BcE2E2XVI2zpzaDxnr0HImc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2d957db2-f70b-0c01-b5b4-c7050980ab46" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2d957db2-f70b-0c01-b5b4-c7050980ab46"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>1MrDqUZo5FVSqpUXb31o9f+MunU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>bEQM/IUH9pyxowWIAb5NMrRzrtABlgmvXUpcfqF7DV71Oitm3ws8T+yOKy/YYYe8adZTSDfprpOs0EnpgLOUWO8J3aockLCEocmuFbyJzzk79LMv73X+ynlAatgDvzx0UtPMwuplS6NjwPUtaKQkbuIvfGZwADzbAMrCvZFIsOw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx98dcaa44-c594-0cf4-03d7-b66e31bcb9d3" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx98dcaa44-c594-0cf4-03d7-b66e31bcb9d3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>MSmRj98zy9STl10Qojgnjs++r5I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tLr5bVY4r394BYSQHCRQxMyMEpwDawWfWgV0ZJ+9OJaSzP8RRK9kbGDmeL891rFI+deWxwHZ//pSi6bYBtTE2Ea3DU7yVitSHG1ayApCBvx/RgPKrghnE8PhxKgy5JNqdNNBE4OxoRbT9POUFO7OEIU9dARK2VyvhH2RSgvzxUQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KFDCElgHUHGiTsp8e+QDf2k/iuS1APlu+SmI7ZzILAHlOyTErOUJhKOvRIbSb0/U2SOr1NUGgicDc8tzqvLK+Ft0Uy2CCyHzEh+JNSiiO3uJKbI55nKlGLyxr4STPoZo/WMFM29VzGTCI7fihQfIhnPrfNvTcR7+VTvQBhP87Ks=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>jogpDBcr/Hd4IzIYzfgru8eXWVHtP/Zh2p4P60w7CWI5Nrk/JwjvMdKaPNV6xa4hsz+RNEtyeQvkZRAI7deEw7sXEyalxPVbYOlHBjQ68Hq5EvtV196ioL3tz5NEC76m5SpoSwgDPtC5VoZIjJLEAVDwyV4P0PddWT3T1pqf4Q8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx47a6107b-eb6f-1821-122d-25de2bec1704" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx47a6107b-eb6f-1821-122d-25de2bec1704"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>U4QrlfFkwNY+3Yv19DSgPJjtBdg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PmB3RPZstZEEPHGy8QVzJQWfXYRldgjTl86R+SoUKAFuJmmRpAwHD1FgYvelh38RvxKCzusUNJz0AzjLcOF+IR0orRkljfU1Ob/35hfp48JfsfhLzjjlUHomwv3daDBqTB3kroPPcN9hyyG1Pv+Yp1RnED4HdT9TwgVWCnDr/bI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>KFDCElgHUHGiTsp8e+QDf2k/iuS1APlu+SmI7ZzILAHlOyTErOUJhKOvRIbSb0/U2SOr1NUGgicDc8tzqvLK+Ft0Uy2CCyHzEh+JNSiiO3uJKbI55nKlGLyxr4STPoZo/WMFM29VzGTCI7fihQfIhnPrfNvTcR7+VTvQBhP87Ks=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4bd4aa63-6a8f-5d5f-c6a2-726caf1ca54e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4bd4aa63-6a8f-5d5f-c6a2-726caf1ca54e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>s+e8tqqQ3R++OysOBy/69mBWQ6I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>lhFkEx3jS6TmZ1gjq/EAhC9TiFaN8OaUi4sSa7mRQiMImcY2wDlj/eb5h6oF9Z3m++48H6p3VNgzQiGJwwe9Cdakcz8sTBC5pHklLrosj7FiYRAE9xamlTmUv1689oXUBl9xTfh4Xs+QNLeeWKlvATBvuTjyY1jNZH3JPUN7xho=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>jogpDBcr/Hd4IzIYzfgru8eXWVHtP/Zh2p4P60w7CWI5Nrk/JwjvMdKaPNV6xa4hsz+RNEtyeQvkZRAI7deEw7sXEyalxPVbYOlHBjQ68Hq5EvtV196ioL3tz5NEC76m5SpoSwgDPtC5VoZIjJLEAVDwyV4P0PddWT3T1pqf4Q8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.