Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx0a04122f-e4ce-9eaf-c779-32fc9ab9f9da" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0a04122f-e4ce-9eaf-c779-32fc9ab9f9da"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>i8EgWrsL6dU5DwQDB2quglmjDc8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>FK7G1NFW0avmWARE/KSdUUhasanJ9NkHj/vu1F6cy1PulRV0/3svrpGkALP2Ms53yOQ/28W0d8Gog4DcKuFjOhnO4Ae9DbtuYTnRBK4NpUTobIvMdXo+Xtz2RWz4zlkHdsSfsV/c5FJXUZDeZ/Sx5Tvwko7ctpF+4Knir32fJKM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb243a05f-6325-de86-18c3-1165186b4f1c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb243a05f-6325-de86-18c3-1165186b4f1c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>BmK3ibdg3JueKeCmRVSnSZqvtYM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kPJ9T/db+M6OKN8EEEfk0Co+SPFjR5z8qEVmMdwqzk8qO2uswvjyIa1qvq5B0e+u3GPhJds8kiB0+xdmwln2sYMJQXemG4F+WzcrYJQThiJY/VVDslZ5UatrkNEDK0pqChzFA47FoKPhsAlgZiYp9npeblgk5rAKa6sP8wnVSq0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx368699b0-c942-5ba8-4062-21dbaa013876" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx368699b0-c942-5ba8-4062-21dbaa013876"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TAP3KQO7TA+kYkuY7S7OxSRYk30=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ksgUFgV5J65q51LkovXaRyy3YR6XHSkirWtVZLx0lHQ6qiaLPx7SSeTuU1mNFfefQWr8vtjN5DP3rmXc80oUS6c/BT2+NlPL7++sDtpdneCKGapaCVv6JPhzUH3X+JcyX8Lzr0ZtMxgjCpMISvsnNhBvvzaUSKvZcsRq748Ptj4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxc011b0e3-c5d3-099f-bdcd-ac3134b66fed" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc011b0e3-c5d3-099f-bdcd-ac3134b66fed"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>gjTrauuJykTs1EvprOoytxoFlyw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>wmQ0tpBV15SDrOpp36rLi2wvsp7303Gy9PgIlYln4VmzOkGqA1bCgQm4Nw60DHgbzGaVxv3Tob0aNWSCdv38DnYL+Xj5pNXkqJZ/NcjCz5+zr5bkfwIhw/LXalJVhTg5tEGeBFo7QQlTAyL8KgpzqwHoFJC0o3UmdV47Gq4hIdY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>mu66EQmcri3DbgWdB3xunIHJSvTQFVKX6XHZc6YJ5W7ZZpag+wnMalC0mDXrwvFOqM1u460f/l1T/UA2gKxOuDn6Hka9/6Rfwiv4PqRut7sypE40hWdxh+Mo535m30Rt7qhS0hClm/A6vUVW+pj/MDy/88Yvzek4Rjo7ySEAs3k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>b8SrDHiFCqrDpXTF440tOBNAWdpTcNcsngfr4Wq2L3LYAAr8dzLlhBWPx5q0t/6tyAWPyxAAcqXi1XU51lrj8oMPRvF5A1ommtFYmxQUV2INXSpgEGwtEmisH2reZXeKNfs6zksOyCdFxy7DApyKzq0BMtCpUkJgA8a4E8s2G74=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1d3430e2-a54e-0934-32c3-b4eaa81cac98" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1d3430e2-a54e-0934-32c3-b4eaa81cac98"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>u5RDfEWK6pmv7kbfwhz9Sow1diM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>FKOVEUN0yTtQ8oIetgLk7ivFCQ2RE/WTTOc3pPqz8LdEg/+BhYSrJ9PVxeWA2Md+Pb/AhdbVYvkTXh3VmxV3qEQqpzmqnUlpX4hjyoVaQ5r1SPnGcYSd0uRxJ6qfF9WrmMDR/IA36T3y7DIPc52Dscp+TcR4bTj+Iqmy7CWehlg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>mu66EQmcri3DbgWdB3xunIHJSvTQFVKX6XHZc6YJ5W7ZZpag+wnMalC0mDXrwvFOqM1u460f/l1T/UA2gKxOuDn6Hka9/6Rfwiv4PqRut7sypE40hWdxh+Mo535m30Rt7qhS0hClm/A6vUVW+pj/MDy/88Yvzek4Rjo7ySEAs3k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx83b94b8e-c188-a12d-f887-356480c3687e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx83b94b8e-c188-a12d-f887-356480c3687e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>X+W4nr3UvpH9XnS8CUtnqsgB1mw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>E7lL1c2lHVr2LIYOWxPR2SBHYvpZW6x0nikWocREkNsrKew7e2BboxAf3p3CC8UUYi+kQnDH7IH/NH09BGnZx5RV3Cda3USAGFK2G+7iL/I4jGuJYCBhJHxsK4sViU+ZgPMPhi+7gc69bR34n46DYG2SQiMKzsU6hcheD+Fcg34=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>b8SrDHiFCqrDpXTF440tOBNAWdpTcNcsngfr4Wq2L3LYAAr8dzLlhBWPx5q0t/6tyAWPyxAAcqXi1XU51lrj8oMPRvF5A1ommtFYmxQUV2INXSpgEGwtEmisH2reZXeKNfs6zksOyCdFxy7DApyKzq0BMtCpUkJgA8a4E8s2G74=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>GLbqfHP52kC8g58ipPFHV2E+w45swLfKSjW6YHP9RcxfN2Ang5l9C/AED25eUfNA5OkEAVep2xX8Z85Y5UpgGmuX3TvGUGrDRfvJEOjAEvU/WvegqkLgyeECLqmjfGijkWcCztWaoZqIP3Zw8OmtRmki+Srvmnvr+jacZMqRkDkXWFTJkrThmSa9p1ve+vgAqtXptc7LIGa8zrylr17GJyGZSCkiFE5xf6xqt+HFcGk48S7oPBzby5mn7W2QBxlweL1PYY7dN/rb6QjPmsBDP1MCodMVebJ809bfzbNGT8dOf1EC/g2QtAwIuX7ixyy55g3xQDwj4ejWGTx08EQzehYSWpauFIKVOr4uERZ4nD/atmhfXH7LDuuKgcryxkYVgDQP0k8Xop9ltkYEfSkK+F2ft32vb6iavMDG+cQZqAGuDJlknSKVWuTiv/Zw91knD6uvIe4XMOhAdm13+nVDhF7AMQIZmmP+tnqyr4tW+lhKzLhYAeeOM3jj0Pl2NJKpRjS73/Po2oRv1+Jiuv609PQPdhPvpypa7DCB+CfoOjpQQI99iyd2TYsyS7UOQ2ImdRgoHy4g2eA4rYc9aA7KXLeAGkh7ezQYtcyuYlRHIWm564GvF5I7nWigA1oTGOA9kW7z6VSGD5Bi2+hTE/RRDYVI6QtBvgKnJb6PGjA++Em3LtU0ulXoPNwDZ0IdY9TQ56dwLQ/+nRQhvU3BwfbkIvIrdGwkLkUVeyV8VbdbiU5oarsEPVh3tult2dVlUcLYVFAfx4TmRyJT7ouBaGJ/cjWRgot82wnE8lGS/clX+1WCUvrTz9/tZOBsKMAkun45HNnG0Ve9w4v1BpAqXI3utLWNRnyEoOFruobU0DtyIzl0+6HrO5a+aZUVcHPyJYWctsF8ocpLGO01AxUlDxu0VFQUjoQ2XDLQywYNyfKUq7/fzZF8+RVx/wDERc7UC09jeNbBMZFKn6oJ8bwCCLLredca9z6u2mFPbEuRQmC2UPSXiUCVzezqNo2p2C4+p4iuhm3Yxw0x4fcqWV4uK+FMRIpLLJSlEKyfvMRpduJAJOcVwPP0eweTUvgcLJDZPrvmr4OI/pEjfWrzik2+OEtISM6aO2lzsv0i2ujabIe/KUyRrUQhnYbnXP8vNRXOzR4csuMeo40oiFz/HOKKKf5mtW2FbvEdL4bRUjFoyeU6EWNmX/U1HXV1psJKho0Ck9ZnBnoDIHP7ibfTAtaY4jSxTQJeUu9AjuKquxO9sgE5no91Q+ayfxhgLryCOVSbD3arKgaF9jsfaMoxaAC3PNRE6vHX83+zdewlJMXRtb+HRzD7nP8cOebzc+cHAW680iQqb2SrrvW6iAusaNlnU9tOL4gxs+w4BtAM2D0ZHbcBf+j00v26428cnTCZ9JfyJKOPJoctAp578lZkBxgls2b03s4+++dyw3Euzu6bAH7rFsRsK3cQ5ZZQT1or/l5Q8wLT6rqROT2DFJ8lLK6n965wgRkMjHulaUKVxXiKgW3RkuDYv5uF1UEpRkcP6FDYiwhGtRd/vXNQR7G/L8GwkoYQP8IXs+TnfE6Z1zwwTDGkTOZaQ4y3NkjlUyTLDQmx/lPkmwDCVhzpZCSMVwTyI9s9ePgTfmFLXZ9TAFUH0mAmf+Kzgq3pLprd6GziYwM+jP7fStMqnksgsQuE0Z5XmQ3W+frM0PzT+Sr9+QhjGS+vdU4HYoLag9V3el2T2mxUdWW+otF5zqtqdUQWiJwM2wpuunlSA+MDt9ilCwk9UnFqa0vmQyLHZTizAv6qi6mRTujzG20ff65RFgwM36XDSiw0HhPFmk/a08XTnYInpn1QYjRKD9ERFvFRCkGBc/vZ+Y9iYVA+2doh5stvswU6topNoxnJ1WMWa3AcCXlG+lHvcLMWFXu8MDBfW9RUn00Ju7AYsTMuqKT15MZty3ZYZ+BjmaKtQonA7U1YK2fabFvV4qwpz+p+nrXZ3/0VKHyPlv7TsADU5PijLVght5sQyyRvzBUQjX8sFEAaujNNDYSOKCfgwQi5Frbbro/svAB9yYH/I0hy5uPcfLdDX5Ug6UASSZoUCYRRySgv+AJWW53HQP7OfFoMWLecxpLody9vUm+Zf7FoK5Q0on6dnCdc+dI4PlKalYgXgkUhFakjGLmWExoMqyr3JLQJLfGDIaRUnf/CtCQ+lTIi7CFNGgFFQBvnYPfo4q7Gbl/eOklnJx5XH6pGo8GaoqFTGEgQ7eZhTJ7TC5+Dm7Zu+y102H96BbbtS9qrIqH4Yyi/8nHJWINeOO7bDhAFQjFUrpuubpZzjVID2emHbQKYVOQsIwHiUrYtUaRucfmeA02RI3S+QF2ScwjVQH7oeWEkflJwS6Xu9nmJoazFpk+NoaeaYzycjf+uQBnLXzziOxGCUuMlXbXRuHKarvnzEQgIHNDD7gGP5aH3FY8FbS+U8r6ZgsbJmT/kdRGA8aNDVGqThB7gpUBg3fOlkbI+STl8sUySOuI58WUrGGnrtdd4MUpTAxFrkCiECGXszj12chuRvCHm4DzOqrNfL3JQTU/TpgY4GmhrfKtpcKg/PDHhM649RKZBqM9MFPKeCNEHjU4Guk14wRnom/kR6pYfnchaPpAULuCRySm4oluT9DkgPg4zuPG1xp5PyUIobMHjN6+WYZpxRjas7ISON3fhtF9eHRexDbDLG2C0FyLLhhY7gOKoO1Xi4ElbhDWTscv5UcOYql4AfO24IRjRP5YsyUe51ujfMSY74FV40CtsKQZdgPFAj0C63SMKTPzr5qFh5ecdIwG501Yw54uS4P2VV/p+Dlv0tJ5yM48jAgRH97BbaubvPR6SCpxcdnQybsrbSlzlJoXcy6NIjMVlaNSCj9ovk4K7bhwpqFStCkfYc0PBJV/9FtGtfCGMAr4TnqL922G2UDCVbtuc7VmJSWOE8huWcSRzvIAgT38+JX+vNEm18BKwoPB739/q6bAxul3fsNNo11oTAjvWrHyFhpLWlhbcFGXmglDn/xoLc+4JPQsGiQ648CYrP6DP/lw1Ypx4GgUrVbpZVfGliH8pH0QuNZHfWbQvwtXqmNaMGIVey8iJ6n6pSInmOxIaBC7yGaQtjnxs2Jve5tTI/LzCNM6Vp7FUTacFi6jgg4OjSRBPfphssrFJOTHIscojNDtQhKBD1b9fPpyI4ZnR2kHmQh8miwQ7WPBem2cHI93sNn38HgPIzuqz2cvXKzu0j7B7ko6g6FIPa31b6786nQ+MZAIcmzoEkw1p8LEd4XwbCoD3+tUyqzHNCJamSPK4ipG7+V30d3UqOdZgL7AkpjzvwR7veNfFHs6tV3FfPB33+f+yEUndLS7At5uyPNLHBnnLmY/xSi9azkIQ9BPeSPPruqMg5u54VoApuKe6dh2i5yf+Gx/jLmk5hIU7k+07U8CyeWNqbaRW9v5gnlfm/ppdWha6acoDWDoR57w+gp578gIwM1GP8K6mMkOiDkNzLZbn45QdO3DQD/5CCaa3Ivpe1wH9GYYfxJrMuS5qxRe3MH6ggRYc1SxS9RGXjtCmuXgoJOV+0G4ZY6LtVGEsgWD7JVMuZFH5V66iXrSGJlqOR31Oaiz8r4ZhktotbbNRs0g83baH5D15xW/0nC3J4Z3wHPOBzGuXzrBChZQnhfv7T/RdcM8ABRN3J/2/aaEr48qyeDEMmAyKT55qjdWA/wiQAyR/Jjq+xE35cmVEg3/FzNzNDkpHEk4Kg5icT9gRsSGjKEzWbLkAXtXeO+k044SF1I3Brayia9lwwkOTH8UXfdKy6eZNWD+EQodMXKb7DKyiV2I8m61kXVFp+tkJ1u/9DalpTiNBRkXOJSuruT8R9glHt65OnJ1zNbVTIDJxa6FUUZzvesktzCwS2LY7QTHXc1GY9Yx8Vc3u3IvBGVwJei6m1UKPDt521ZORyv2XYA1z6aI4N85quWgVbmbuq5UGXalJZx9JiWp+vRUgVk1zoRNwGyNNCGMugcAtN7FXniw8T3rwvm6I0MInN4dWmiuc3PLrXakvpo06JJ29ODv76INxD3IdxwMph9PRhpVlAf7/gH/vAyTI1qh0828I3znw23/rPShcxprIHAGZgTxoUvjXnyCclyIzTklscYDGa0ilPey7yK00KqsuuZ+06NuqJVJjAC7scIY25TiBT8b/rYlZ4gQPfSTk1QTJoet0QWOUKVQhR9Ey25CxrNLazgC3kWC/6gciU922H4p2NIY+/CKQXkgPJ4SMOL+hERFezkrvNWvz4QAHJIXDI9H1lRbSlKrJ6vBZaEDYz073MRQp1nyNzl9JB6xNccxo1pZRtQ9tCvlO6wFMBjLquDaOfH/VZY/b5l18kSFia9gBoxlIU/xoqTeJHLESA0CivU/eqW21XBoJ7pewuWFMfFoX69+UsRHWt+XfKhrY9pgx0n9dQgzZl71aafwPCr5KFqVgJh2ZXccbHSQxv8kPQ1rjozUMfPIB/41bgxNeIDM3p6eEyp8xXCAJpFhoS9bOOIp+NHd2hNRZKn/MALynE2SsM18FDC/Z0oqGYeYohNEo+vNXuyQeTDfg7+5KEBCf0yEyTqfRACLL0YHCtsdQ+EHOJhlw/cHPCBTpe8jwTDTLWkWnk0Jr7es2WqSKu3aFammpGWZU0+nYyjc833EvMH7n3n2FDiQGjco75u3z0aKVlANVuZuKi32ZpPoic6ztx2YEN3RWIvpb6rF0FBsfar4TdTepYM1yE7AcrdrmSKLsstMlkyg7voMucGVEjM63DjMHvVlNBwuj7CANMGetbhVdI4Ni3hjTVBPSxBonPSdIWMrCNsajAPnpuKtTPqGyPFPyZmdsQPXFDlpE7kNjT3k5BoHcbzsp2a9dGhbNLzZ/jbkChX7SeuMiyJ/PoLPwTzhgR/y7ggw/7jmZZR8Pqara080bQX6t2fhbW97ShzUiPxiOCIk2Mh1dYJSPcIe82RQWeRZ/01wIB7cpLVSqq4r0ceIJB2jLxg1fKMoqeDgV76y9RCXMADj3811xsQCuvv8XfUCxAcMMbuzUSaguzjMs1QmdgVUgQE8Bwna3KLvXVY4K3IzHzfqJ6u++wVZXL3AX1BhmcNilXOxwSOMmat+89JSU9FvtGe1rS6c0nDd1fKT3iiXTbT8z11mEyyUVuYi5O3hnohWPNDJY3nFJxNB5JbqvLkiGRsKiG/1O1oHTU5CRiCk11KWN67/MGXJmccvPiAEggXWEapYxWL3n1drz6U3caHAn19eQ3EFJkHI7fpSmkyDYloOydXBg50T6bW9yjtWLcRYjiNRTuXjUnok8cNl/kVrE8xdHLi0L9BCm2CDTA/8/nuh0j0VKi7LJJBQM+19olCQ/9U4lNwM19Xt4/wqbQTu8C1dgDxSNa143IEcwukYbSAwMtCz2bC+IoJ+LEP5lxY+cmjXUSX9C2OFFOVGRKhVtQ3E+4CKDLXq5O4TqVdJJQNd/TC8aTr1UbPe5TPkR0NEBD2IdDAAlpILc8wM=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.