Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx267b42ba-24a9-4798-6063-0272f8d28520" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx267b42ba-24a9-4798-6063-0272f8d28520"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>1/PoIm6bRTYoUarHCTwMJq9ScVU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Fra16ftvYbdqfZxQEV69K8SrqLPWaF63mV1vN8DkLXVMapYnRCA+2SQjlITxCbLZBhXHGtXdqP+X8QSiqAQ4PFwU9LUOzq0fm8h2HU0q6AFoT95NIi2yglFiRVS/iPxvHDwpy76M4F3VOrB4Xk8TmvOFrXEo8Pn3v/0hVW+GZH4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx66a124a2-f675-30f4-041b-4feb7e0fe522" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx66a124a2-f675-30f4-041b-4feb7e0fe522"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>SJ3xUya+zAYbKfEBf5Oqd9Z25qo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Smw5amfEYLFIpUfQbf8RbF11Jz5jj2Q358ZIGGEOv42leb9DEikzt6febR5rePrhGru480xh36r3IePOTVijDXKMpo52UI/ivCmn28djGf/QpY+CmWb5qy0VWUD8n2lXYgiL8RgUQ4UxVAAA6+ecsvBNv+yZfiwU+BOr5mjNQqc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3b154434-fb92-589b-fd05-d1a9c0723dc5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3b154434-fb92-589b-fd05-d1a9c0723dc5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>PJlBKfiFLsKgPC1OjZWTjmmwy7c=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>v1MIKPLK8KioRyBP/UIwYbYw/LL/9nuYtbn3NaXbP422pmJbAbrU39lpLaXjLjllRwkEhMSsrS+GxZLWdzcycr3Q7qqZqTcPzlzPwNSVjsb7/tlBzuF/fD/ydO+J18zIgUSp+3E7KCVHnqDZKE+djA43lt8bYPrC31mBITZiYng=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxfca16315-c432-0fdc-3a8c-bedd6023ca30" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxfca16315-c432-0fdc-3a8c-bedd6023ca30"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>iolRjIkZJugo0iPl1SJm2u9sweI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aPCISIPrhXxHss6YlU1lhQHXr4m/CUcpescY8B4158ZUaNckwe8LEWVStm9vncfnSb/IA2r2vA9bkaRdPxYedNBcL4xnQKlcLC/cUVp4JVzcKE1NYbpbCyv6kbcvZMffb3LCfaloOVKOi9Osu4K+pq2urVPe4AZNorXLInv9lp0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>fxbSRzy55QgAZvxVFjhvhS2j3LRdCOL0QCP060TV9Sx6DvQsD+6N4A4Mjdklia+qPxlWgCafSVBffIY4RDko0dCiIlNi82UxbtFM+qOJGdEipWdpvprxpTFGRLeXqjoL/QpPrsUWNoFkrAITOIb6vuxIWju6VG2c5sVIQSB3GWY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>jyzUDVSD2UcmUsG9U80i3ocsGUdvShQDYDhrt7sZqNV8O6eSXA7dz13lXuF8BMCQxhkkHlp0IvsYBicXxaudjseAEmrWf9tZaIoEMaCxnNZq+P7XiWm2ChpWqVfi5hyU7VUt897FrqkB5yJ6jI6+pfuWl1QsiIgxWKDVAXSd+Yg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx6fcd7713-7fed-dbb3-f583-78a028afcf16" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6fcd7713-7fed-dbb3-f583-78a028afcf16"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>MIB68NFXaQbeSJbeiOxHH5j6KLw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>V62l/REdrwWy43ZYwqbkdfjrFlZ2FZs/IrZDFgG3b2oHC1+396kOA6pGhvtQQr8547fJyuI0UZ7kIYrTOfvafmVpTS8lElgO/7FW1E2iAqQjf2GFqFYcANT583Umm73+izOGtSCuvKfJP+BQnVx3J17CwaA8luzo8yuPeE9qIJ8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>fxbSRzy55QgAZvxVFjhvhS2j3LRdCOL0QCP060TV9Sx6DvQsD+6N4A4Mjdklia+qPxlWgCafSVBffIY4RDko0dCiIlNi82UxbtFM+qOJGdEipWdpvprxpTFGRLeXqjoL/QpPrsUWNoFkrAITOIb6vuxIWju6VG2c5sVIQSB3GWY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxff8b188d-28a1-972a-f764-ad22bbd5a1fa" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxff8b188d-28a1-972a-f764-ad22bbd5a1fa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+l9ffm00K3jLgzjIGHZQ0AAalX4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>pvxjZ4Ks2Jja0x4wxtNWb6pUiIh+d+949BuBFZJX1H2FfJJlsK/Ze6tVOYVjYmNcHvMYlgJrHBj3mMO8M2/asCoWR7slfGh76061xCDdcnVnwezOpRyD5jE2HUYRadck970CHC8/j1Fc5uEwe7a/uvgE0fLu4JbNLiUyghu1Igw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>jyzUDVSD2UcmUsG9U80i3ocsGUdvShQDYDhrt7sZqNV8O6eSXA7dz13lXuF8BMCQxhkkHlp0IvsYBicXxaudjseAEmrWf9tZaIoEMaCxnNZq+P7XiWm2ChpWqVfi5hyU7VUt897FrqkB5yJ6jI6+pfuWl1QsiIgxWKDVAXSd+Yg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>fXyHW224kgLSURUlV1KZlwqLO9+7JvhsbUOPQVBaoRuDoVPqjvTfnxACWpf6pPqFnbgYbo0lYiy5a1Zo5WsyhgUvhFvNHmalmFYAA7jBASaf/QJHVKQynzblN7LNdfAS+CAFb49yhTJ+cFJgrO57Vi/nASSCbCRcGUiyBvLKrNzTBNGWDxqCJYgAbtwUzCkFMCd56Hi328I1ZEx3pGGhnHxX31InkNDqaTy2tbiMlYzBxPGnD/TcwU+LZerf3ZWbwujTXzPepQ70tBrkbJRX1QhF3W8r+AyHrQOSRH1s7Q4No2RoEkWruKrynlm27qS2CsT/MIpN7r0N+LwvdMjj5GVjvKqb6vd31jAhjAd4OQUmfqXLAeswtbV1l0/Eg+pjF7Kltda+j7GDbiGLQleH3W04+uQKsgfEl+dGbeAv+/3FypVxC7zmy85xF9eCM/wQdolQVfGo5lqSL/HzNGKVX8+K9yrjPleMCJibYMA55TkLjmjPtG29A1wN076f2p6dNdLiPUvy7fYfK6pTx/1f+7vGPZsR99OpcxoVYasoXDKOHScvMGEQrnTGkTb74PD/d0uvRLjZTohzHciMObgoO/FmvfGXxUTvRJ9UgKvNacWa6pbdvxOQPnLNXfM0Z1K3LyUXAKl1xD5Iz0hXQozfns3kAbUjaqkn4HSBc18nMgGj6IlyUfTiHVtUq+r7ykkB+nwWHTbRARP9JTZ9A9Yeh1pXd3T+yoKGEmhQJFX+zyI67MMIyktWUQLBhlsVsyp8Hx8dqHwnuzkO5fjZD6HkL74OdwVa93PszoJ7YFOAGqBVtXIlLhruHPftCwXuuSXT4YZUWqwO+QFWUjosXySTm2pi5RH0Ph/KIMJsaSvsGaueSIwZEiAViUk3v2V267QYgHBLZPdj6mT17FzSRUwfeNhADGDxHQ6gXOxFzuAOn6spIHNqAWYnu9SJXtJWY9WtJRkinp+fdfk5344MNCW8N7kw0iGJgwlNHV1+CItpZfl/Xs7hPgsmcrBSU5WIHnzTeICFH2aqzYSojIG/5tjXr3CmPnpDrNaK/nN5dnnPJ7IP11BBKnVYhliU5a8HmjdC71EH57KN2zvZIFYWI9iYkYDETLW6jegvLhEdi4P33M1xMB+4gRPJRknDY/mqttmgM66JsS1p1GPE17qp6caLUw7eP9OUH0Mgs4yXvTir0LBbrp8nsBwr/21EN61j8qvU3s3xrF2Jyjfs1zVxR/+x2t07MZ36eH0AOiIOZ95VlUmUjYowOz6ZuJrHY9PbbTpoW39dZNFYXqcvvVjUYeEUrkfW1euyp3ZecquUCvNN3Ci8/o9Bd0pwDDj3ZJx0ve1WjojgCXHA33o9+k4WEKyUX/qcHL6Q6sZa42Bnx4un0cgDTF98qeM1z8cC3f7WB0zaC6bfhRXIXBs9FVKNKiWc1zKj5mUQoVFdAMlk3J0Bq0//6kzLET9oMNdhnfM1Num2mCmwLRMDG1BPjdybITHdTuk+J4pBrcaNwlr8radfMGTEDOzdwV0MFdOTjMXqmrhQ6HYMyC253D2B7kt0Mn/o2OFzteZf/Sl13qNWatHpVG1LhakhqAzatbjuKMG2izZVrFkb5a/Z1RB3KzhYvP4RbUnnIxiuCVgetnI/cKHVYBxJbb4I9hplfBtCOKJllJq7pdXIJumPM59Okrq0Nur2Rs4ZE4UNmeniLfLioNxTB2x6TywqX51HqsnqAQ0h0BUODuYGzpj9C664f246/aLCryh1vgtRAQaNb8snH1b2D/SvLPq8jf3RlrQ1mJgdHMyns2LVus1RzSe7myZ9Rsoe15zl3YHKbGUgsStkKYX44u0Q+tb6AE0fSrID0GlTxLp5m82Tjr6FaFuOzLTJtSea3cV0y+xhJJ99pIMevWM9JEmibfl9RRaAu0beZZEP9zDgn5g9oUs95xTrl0EcSEPcDxaXU+jaU5WoO1jtIFgoncW1HncuGHXuF+2fQuceiWXqREKDNHRHrbVU8/UdRDGtO1HdJYnu6x0UDpetOQAta7DMIyknDWTj2M454uoZow9ujjyNsb+Rk8o+giwSayj0k6iZHLpaI4fkSfPGuax++klkZaRFzK04MjkqTCACmgYIGerXl/6AT3k9dNNWGt6k9/Y4IMbnJqBCfAoIS4rGDSIoypQVEW6OrrZo5EmnhSvu9iZTfBy+hN0WGpn/bZ9BwfwrK4ZzCIb5DTilWeT9/7UiiG2PNsapePvH7ZycqpRq2P1FBJ7rOCplQCihb/HBHrMT5ryrbuULQRbyDRGqY6LfOWaSUP130j6Shg/xJAVWfOgq1m7BUQmh8OIfTjgIuPkcvfFwMf5yw9jQC3GIXXEM2pBDN+b3eKo5TKYXVyh2RDkzHZft/mP/nypf/3gCS+Cxx8slUI7QWQawPQxrK56cZXx0Ki4RMsM1+e3e7FbaRQbcHVl9EUMf6k6eaNBBHaPDhlhqSDRmqsMxdfDDtcw6nk9hnjffZq3wrWjm/sF2X8yqkWRY+XOq5UdRWYcoQpVQoChKg8TeZA6KgeEsgLs2IRGghMQJsQsxJdqfVW2hykyFnfXoQfrspKVkZ9ezfoqsK5BbwPcqF5DL2U5uI+x+LAxGaBsYvRpH/azFiZDuHK0M+HDOkz5B+5Xg5InprV6WMIsufQCLl/Jpv3gJtYD7g6QCE7hNFV4KPJR37H4qSd3tQQvVodprARllTeDEqdiDeobR2AVt+OTMuAbCEAUyMustehcts4N4vWQ+A2v6S23HgpJlp0eN6CHbUoSPL0CKBbMpyeIOhZ96uyfURgdH8cfND6MY6Da0oHS+LBTPHoMn+oWm0dp/21bH6hRBV1m3lVKIqhXUXnL2//LdBp09AdD1rXcE366RmnO73U4SIUJCNKRWO+fb+shUEFqiC6upHUZyCHUIuA+OhQs1St0mi3PF0aLBgVUhwhDxBy8CXKP9HmEZduRfYNZSSX5OzrRx2/LSM8gG5a45R3gzLS8kQnTp3hm13Hct9s8+n3dHP0mnT5YOhaK+GuW+GJ8zryu4GkpMffmsuOIWgEeAyTxjZwou4LZzfRdYBUvSZzVbFQWyLN2Map4swaDkwqqVDIcQbhl4lHgv9cZ3q2FyBRIUmPgDnl0WkAR9IratV1aC4toZePvx7PizkDMVLH2aOl06LAXEtRKo9UM9qyK3r2zUv09h0rAEwKKYalp60XM+sk3Th6kSnnp/AmIBnZ5E0j5WlLHiXTgChlpEKltRAtqG+6Dr/4dhJqdWCYnQVnnTfeAGvBx3T7Snr2+rda69tF0RHvZUUth18TMNhv+csbx6MbFRY6MW+75RVR04SsRbATq18kpTYDyKZEXIJXw9APYAv8b6MshGbnflOPiHVSyIEUstQ/jBGD8GpqRm686jv11/hTkJK5ogUmRa+vi8MM6IFRF6tUz4z1ds2kvc8Odc0YCVovD3tzhCkYlSGetWtZtRebKe4kYKCCdY6nC438MAPC0VSuHasXThwGPUzNxnAFDtlNkpXJmFWNr/pl+oGpK/lq+4me79wX47faq3opFEQB+1jUZcnnETjjTVqMIzXw62t88/baztUm4JNU7/QSpxCYr26VjBIqBk/rvucxfJ7DzyL/YyHPyjJR3UNOoEEHgvWsvWM/356p9SW4B0lXNZwwpKFKl/NVIChBsQAXev1olK4uk9Rzc8fjcSBhByNQXyPC6+oSWcfcjIQnCMKuV9asWl8RT1hQmWoYeLsUsfPBh3oTi8cZaM+QIqCf9lEu6wbwOg4XmlRjsc43SoDUmVX/vIJJhleAXqwbTjWNOh022PrNYLInNQ/w1GnLF+wOWbKas68u+92ocIrQDASqj7kh/TCWm96bb7RcsYPcEbPePqldmlHJXeMYcPUDyFUtr0WdDzRyHRexCVfk/p8RoN8trAskDOI9tUct/D9sVD5yf71F7hXIT8lo28km0xwSN7AXaV5Nj6nDius8Ti0T+CX3HqQo8tEANkKX7ZWPPW2N766KXM6m4AHv8wSxdjqrbPWOmrZKqdu0CU3q5fOLfNmhzTIVzTAYjJ4QzIhinmThqUXrRCF3HtTDJOqYGG3g00aJYQkrEtFI52kjcuGIUzJ8GmNEZlJRJzgKS5D+xHoQbg7LPciaPIxKHzsYaYFWYgJtDtopGqRXEMd5Zsc1okMJcdzTisdZ9uzFZHPsgiz6cH/olP51/eHF2V/geaS0HiftFmNuvEbc8j/2ZuYvtQRPy900ReK9uMyGNQVoN6KEeKUlKkc5YYUvnT0jKgOs8f/vNnED/DvWQw0NQ7KBILvU8zUQZxH09DJB+z2xJWKdqA0ljK2SQXw1lzoVABT8ialvpmc7cNOnAaN2BFWd/rEFcMOLF+Zyk3pdrmEYibko1pKhidsPbpZ1aG0M0AqFo3d0XFTDub1jMKnT/9+Qr+eFbBfTAK1erKOVYywwRuU5xe3sK6OBPXgW156zuOEeWPcfTIGNOFIPd3IsoMwAT7QUUbJHOjDStq8qO45ikBNFsu8fx5blfXFluXe/jGtzJ/ibhgZEbuM+jShKR4P3GUZUqDyWNFULmDGSI7DNQHEPfS8avR020bSkk6FbS1hSzBfXOXV23rI7y/Zxp639iepoCeeQcCx02/zTFP3XkNSuBSvgqI2hYVDiyT3TtJb8R2XL6DqX6g3Faa0epICGPv70dbFNbczKjTEbKVEoMIq5CzN+SP7+xogzEHjtmAF2Xx3obmkNouOf9Bkn5gX6HVC0tCm8kzQdbIsrEmZ0gC5j/CA6zdpxYwkDj6mOT0Us8qrtNE1gol5Nukjs3etTXPNx5hjWcfiElOUXQyxhk18dpNP2egHrRnBzbDrgvEYXI8pOb+29Q3Av6Eo1E5sp5b+hH6MBNWgEKWHuHe+YeoQcQXcIe/jEpub7LBBqACAAOlalPca2gPqiSiQ2pXM4ihA4epGLqPR4ihnZN+Keo+RSsruDoIGErH3EJdFca05NBCrOM74P52ElprQOCUfpOuqLbw8kvGHVzL5GkrG/U6MDBGb3n12Idyd9+XCdGU9XOYBtp2vQm5GU1+qCacG+3cxp4CfnxgloOoaodGL29SQZkfTFgo5dHJRMPz0c6D0PSKQldQtnpOdINlYrTt9NkOe1MjcbdU0pmGDy0OfYnm7Uv0ruEnO2h3smhHksUAASGkvpaNPlCZtg1Yr299HE6hJH1jG/FK6N9C518uMfgFFflvAO2nZcNuym1qD61I+QCHSrcbJBvS0QVT7BjDMRkMdBrXaernLtWZTTMR2zdT2bguqA4Uyq2aePVQ1uFXXFxIp6K0vmmPc+MWynTX/6QmgZekkJXgbNhrb6rLlXJS3dm8+Jqu2SNz65DuPJ41Ia7XtwrlaEgmI8bsZLrZJ3Jvf1LHC8RKTPI3EDvaUianzJPKAje2WIznY8NEXe7aU58mypu9B58TpRhXlquwr7MQvDMoD5S4k7YjRmIZ5KFwbDDx3Ol/pmjPa1M8QQ4=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.