Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxa7c1ae37-4f98-0ee5-52d3-b74ed611dffc" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa7c1ae37-4f98-0ee5-52d3-b74ed611dffc"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>QM2qNk/Zs2sfuFpTzEPDvQ/NLas=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>acxNyXM5tNR4fytXAbvQDNIp/zIZa0S2AbUFa587MBNOol6ZOx4cS+hpsJx88e0IH5DRL4njdAU4WBiT2144Wh1r/o21RsscMFa3XfTh4MwNJ3Io10Y6GJGTnPJJeBZInd95N4vMLT339tqoHaXLAWUZiCupWtCliHakVZB49yE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx8dc4f4cd-4977-d631-4fb5-11780694c04c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8dc4f4cd-4977-d631-4fb5-11780694c04c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>GEVtOQg3CMFBAlNzYCyM/XFuQs8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>R8ZhUQ+jd0ukR53Ltf+8D2nHclkWL++5QmyS7Kzf9ADFd4GxwZ4kppmAPBfYN1QhzxnZm46bX6dbnGKGZcumd/DrWDHLpjXyB4G15QdP3fYrDTfpNB/XhOzpyVVECSpVZ8K8vabGs62VkcZUBVOU12DqydweydH0HtVkCfVsK4A=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb71e8fd5-4395-c6c7-7bd9-27b6d68a2516" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb71e8fd5-4395-c6c7-7bd9-27b6d68a2516"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>heyBnpUclSk+D9OEkdernayD23o=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>myHH31fq3p0l2yQYAYAdXa4NOYyxFwcXLOUB0Eq9PU2yx3i6a4LXM8YQkJmAfUswEkbjatiB4pp8jgQ4tKwe7oWyx4Pn0sYYGy5i6cO4foV87l+BDm1RWV8EcVGHGWQbtP+xbhErrV7aFulPTnjTZu9Bb6CVVf+sjBOOFhBWOlQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxedc59a43-58bb-798c-ceda-8129a2aa61f8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxedc59a43-58bb-798c-ceda-8129a2aa61f8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>vohABmNV0NGNqxoGkcv+r4oH1oY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Xf2lRAQlxchSE/l9qIf9FSh23oOQxsxjn2Mf/jEsLaU6OAXzUtNmE0xw8+ly+J62DzvII4DrrFRS5/zxytnzoKvjAtpK634Io+nr5aM98s1b+wLzJ+tpE6ZGZXz3Z1xq9ts6jkpvUYBcCoKMgl1l3IebGtxdycY4RqpCcooAIzk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>MPe5lx/uHVMCbPFtcp4GFJV7/hfAJnMWi3AZMK95idt6NQUdK8XQcSROtpN6bLs07N4PvWvvjcc6dUFS2cnh8lulKW7IC1iBEewvC5OHm9kAuTqp8k+ppyrhSztR4SNG/80AgjRahcxGCnbSHLePHU8U3IsX32FOYJreqGoxBs0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>EK3NvEfPwrjy/4QkQWtaOiFYjSBV958lTE+D0I1lACmcXJR5C+9t/H139o3zW7lj6eqq3j680kjDryaUWIWxvw/hq/IcPwf5cKGbwIBJuLYOmNnkmpfTzxGf2oaZX2R08ReOGzgkugn0qU76hZzGujM1MGNb5v6aqwJNndw1/HE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4a8a91b1-1545-8f6d-eeac-e264c2a1390c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4a8a91b1-1545-8f6d-eeac-e264c2a1390c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>7vhSx3Dxrn4YGYM4YLycpLpvcJ4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YeURAIMy1R7vpQxvqr7wpETlTfZypIEClM7ViFv/J2RL/asfGnV4lRqF6iYOkSkElpwHIYi/r1dZYTYGltr7dselSvt7LQC8owC2lNyCJpdoU92atGpxeVld5RbV9vIa72u2EFQY0d0j3fxbxLxMv/88N7dKRlW8iIvcJNSdV7s=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>MPe5lx/uHVMCbPFtcp4GFJV7/hfAJnMWi3AZMK95idt6NQUdK8XQcSROtpN6bLs07N4PvWvvjcc6dUFS2cnh8lulKW7IC1iBEewvC5OHm9kAuTqp8k+ppyrhSztR4SNG/80AgjRahcxGCnbSHLePHU8U3IsX32FOYJreqGoxBs0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx96e3b160-e6ec-bbaa-fbcf-3328db5887b6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx96e3b160-e6ec-bbaa-fbcf-3328db5887b6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>2ntEFRGmdkQJAx6+o3dASIR7fTQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>NX9aDHMQPArG2f+YpdusGNTBGcB8Id4FWYm6oiiK4R1qvyQg8pyGKRi2IdFIDorpbPUewtK6EizIM48nWa98ja16UFFEFi1fpn4AQHmD0s2VvyoIYVFlTxE27/IBbGgDc57yv0fpL1R8+TGImnCJ/dA+Snp/jGB48L/ROmZly0c=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>EK3NvEfPwrjy/4QkQWtaOiFYjSBV958lTE+D0I1lACmcXJR5C+9t/H139o3zW7lj6eqq3j680kjDryaUWIWxvw/hq/IcPwf5cKGbwIBJuLYOmNnkmpfTzxGf2oaZX2R08ReOGzgkugn0qU76hZzGujM1MGNb5v6aqwJNndw1/HE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.