Home >
SAML >
Examples >
Response

Response

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

An unsigned SAML Response with an unsigned Assertion
An unsigned SAML Response with a signed Assertion
A signed SAML Response with an unsigned Assertion
A signed SAML Response with a signed Assertion
An unsigned SAML Response with an encrypted Assertion
An unsigned SAML Response with an encrypted signed Assertion
A signed SAML Response with an encrypted Assertion
A signed SAML Response with an encrypted signed Assertion

SAML Response

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx5ed85599-4e64-585b-e219-4069b1458fde" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5ed85599-4e64-585b-e219-4069b1458fde"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>1Uixlj9Y99Y8lA/OJJo2wNpINNU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>yEOceU7hHxBaCnQ71BjKq7gqHVLeOLKD4/u0HWLdcHXE8FpmI9RiikbMRmr7j7Eavxu/6+ixBRhM0cdBkVhfFD8oxpqo+82EmB5d2UzhxJkf2F7xPofsQe5+2vwUhD/y5HgSWV4IFYRGrl/RiNtReyNo6f6JycnIgWOIDZoO/xo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1dc3345a-a1cf-d883-2917-42aa746a5b0e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1dc3345a-a1cf-d883-2917-42aa746a5b0e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qiddTMiQf+QbWO/Wm4iPLa5hB1k=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>MOJ+p6b+ABFZom0kq4WJfugMVIPEaq6UgSrNn5HoOIgC+mhLyV29E6HyU+zTwOaQRQx6PwkPdy5gynGzzzPbRVJQ+dVrZs3JfNtQijnKPFZ4HHGQar6ECut1urEcV9kPI87G0gIBWUHm/k6wVxqordnbVeAKJJrrRndG1DLgkXU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Signed Message & Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx00a26d99-bfda-689a-09e6-0a704b29bbf1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx00a26d99-bfda-689a-09e6-0a704b29bbf1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lKRg2FHDF7deXBnnrufLhWLtrVU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Pz2WR3wRhN72dEwX9FeXzfYFHvuEDKQwXIhF0iVPxDcqZ4FTdSRrTh8IB9p/mhtyi2LjNOsEsCrrwmbVKFUnV9wJMiBtrteDUDbY44dk2RSlQOSzFnXZLxqYa9rUpH6YzEOS0bRrvopAdcDXx9444RMOejkQO2EvOH3QwDibmbo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxac1aca08-f21d-7fac-2f26-658a4f03ba95" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxac1aca08-f21d-7fac-2f26-658a4f03ba95"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>aEyAeilNHLt9FQ5aEpJiWRTpJ10=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>plS+GOyP1vMXrNVDJQEZONhT+jp9L7oVgA+DbrLY55kCRMcXFscmE8bLPRz1WV0+XvWoJBIQc6sBnwGH72MS61XxmlYBddIHqxMfW5l66x9J2AbFdWGvfTQ+5E26L+qGaaJtgUP5vFdra2XIFqnXKYb5VEHI/GU+cXztu5M43kg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

SAML Response with Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gGprGj99O6Fe9dDxMlfKRKvEAbWaQhYGuMf/v82dJHR4LpkLqXpNpemYQJGvCL2/Z3bG5APab5fVqe5D3Iib4V/s+Cuij5P4Q1S+21JKbpSepIWiN5PmOXQhbKV3JOb8hER7vy9Eup1XJJXuT1vM2M7p8otBDCo/1PxNaJ3p2/I=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed & Encrypted Assertion

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>xHpIBnaobILjmcbskir5Tyz/yikBAkn3FivdTDx50rGCfOdSJtfFVb4DeVPG8jUnwHzX34eVVeZq14prT8aqZ1KzY+mNWRAH7uNsRQLRWkg7pxhElXA4L9hAFPJMvlz8mcktmiLblnybA9qTRYYaripPLC/OxPtEbwIwy2u4EI8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx60496140-ac3b-8f11-1785-e9494e88d26c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx60496140-ac3b-8f11-1785-e9494e88d26c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>tFPtjiHS8ZsS/iM/Vn9xkvu/X8U=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kvAq68CXHsExQz1z1zPQqRqBf8BVRw17n11bzizXl9PakwKUcpGwXgBIkMzLJwGX04XSH4Ot/pjQEXvpHSv8pUdmmqZ3jjgd949Lp2HY4kwylttTwvosyO+4Vt9m6BUfF7+xZsPTQDEXl1WMUOVymXREGh4CLApInMJ8XuRYEw4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>gGprGj99O6Fe9dDxMlfKRKvEAbWaQhYGuMf/v82dJHR4LpkLqXpNpemYQJGvCL2/Z3bG5APab5fVqe5D3Iib4V/s+Cuij5P4Q1S+21JKbpSepIWiN5PmOXQhbKV3JOb8hER7vy9Eup1XJJXuT1vM2M7p8otBDCo/1PxNaJ3p2/I=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>Lm8FBPh+nwQTZmPQ5SdPXcTKQ9/vsWxVYiF/qc6QFyLaWy7zY2YO3DGTS3upbzhK6ku+fNuzMnt8mMy8zFAIQ2bV82CVvHyWGK3Y2bDay/ML0/QigH5/UxsE2r2dJBpzVPJZxnzPcJlom8/vpMy6WYAj5tcZRmnqafxfcNClCoT3nik1DVl8uquywbtl1dRGZIlFDgktT151XWkVTnpolP319BBFF/CAGcGHWieTtEcA7Ys5V+3AWOKbDpYgpVf1fx5wcvnvJSjT8+abzUTD+PvdH/5Bc4rp9VhnWKcDnpiF3wyrpFbBWKePnBSL+3aCLUcnsgfo4Us0FJNxPTthUB67u6MipG7A8v3llYCj0SlUDeh8FLjUSkKGq/7gWxDOTrpO91h9tNmi0z7gDCpy1tiJZmPjD0MOuB68cp42kb3h+dprDCg25zz/8NIreJu9P7ba3DdWnP3eCFLHYPc2jcl+zeQPnodjykP02zRghpI8F14AwaOnZqY32Q6Z3x5PqrG2KzVPX5MvMoqAq6Rp1Ga5HXO9V7vJ+HUak4WXZfXvmtvnvCTeIl+6ocZack3/cIC2Zm3Ulaaw0RYxWZABTSx574KvEKduQUjIxHYETwJ51RFT8JHZNAokYDL2hhTQbxHXwF1ARHpOigQmL5j6N8p+hYn5kRAlz+3s+bj2KvA9SCCVNuspFF5hP+WSwcIRo7rGosmr+x94GYoVssQ9TnxpTQu2miITpMpOGiuHRJkw5PFRKO8WnktfSIRq3cLHgxk0MPc0GrNlgTTiQxBzDEmsnW0nNPqx+j1ZUXIJzDPfMIKMYLXLlRpQSjTgTqahiNeZ3UyaCRAedAn6YG9xSKCqdqVC4ENR0ccU5eX+sd3RuwKRkrUuQZ6+fKqqWMYQIS9aoDoLrLJ+FT9LOs4VYEp/OQF5yX7dFTFIN/uI0vHV4cWaU74GqXFpulKtsKI1hO8vLuVrS0vkgYdE+0ZmhuTXDbRfSqZuz31Yb0KWh5mCcgQnYUGvNfS/IoO8WlGz0IkvyFC53O1xwpRY0RVrZsHImYl5i+gLAElnaLow8bciN8WU4qeKCOgO1wUR1swtLOCjay9R1exPmFlH7gSsDV2FBscDlrskwtosY/bbEFPYjRkE7Fd0zCSHDZgAe34yHXKp8WGeixi1kanIpeRhxD+RZT0uLvKQB4Go+OiwTTmKbGnhpKmEnU/JaW+KK8Ye2QQ0KXfRj3dweIVitsKL8gKfbUBH5dDPM6itRVQ+Bx1xgWrzURGnsjCPeigHrbfZxlt50wye6P7KW8tiPEljlPNyoXQ92I14iAqcE3+mJYfWeTpUJs3S/9zZ46/bknU89EgI5UOxJZHqw1Z9EFUqNzIK/mtlvARn7LNsL8gGhmxt+hO/JOuPq0aZaAle0MwlIIZJvcWC2tr17ALhYpXP/OUgSfLI8xdq0+2c90gDVNLtqisP1COWCk0ofv9OxHSXqPfFa1WnycHWcP+R+MLJCJpLoaHAR0ZNTdx3cqgacCuYbrsCFGeaakavT7/M2kuVja/CdxRFZwkZFY7+P5KftcUkXhSvz+2Gghj19lcCewzynU4+m/G0TcjPECpPVW3/LXcQ2YmLeJ0paehcqVjkOYjISy6riuPop8RLU77mJ5ru/6xMuoGhZRypKqAXFye7w65KfNEWFgLPYbv2Mk05YT2UiP6xsC7Oo/V6v5x5jw9XQVutRXOnBv3rRuPRRIfMRvj1DBJqwLyk2dDQHxhbcfzgDJ8zjbmV3wnDmqHZxtPJPHrTXwSBVkqLe5lGvOYFe6uRcVRHHpqNZb1qfVbihtLbPHvV3cm9PWgKERa88nWhW3lipcuoc/kz/CFICFUYviS3bD5jCsyij9IQZl83Ielve1ZLAaRB8bDEY7sIa/f4Y/ZM2ymBFt0yjgyuUqyDKkF73ZHoz8qaVuKL43mSOzS0Ipm8UR/jqVdLVVbZitcFcwaTDO3aW5QM2G3Ps4TfXKxogecSDUkuG+1kApe5dpftFkKoDAfVVdVapAPFhJw2Ruyz9VNkVyQPGVqw273m9czsn2PUGn8gixQ1USJHdA8s75iM8Dh5VprwJvkOffr7i5Qu9qLlPHwpFTlHbskxYdwKFJ6vRg8fQFLtWK0qdYMBhdCkf3sZgmRnrHK1XkuGKwt70uAL+wWsREI14GG4C7SGesyQnYknVdDgSY4iHwDq8OgjMNhrGWbM+sWr3V4CRwTmgem40xGmbXJX/mbokixvp7ifxvfNzgStFlr2x8Uke8/ukfuYyMQfSIbG8mi2WRJA6EXOQwy63zjSAxmvLm05F1Y4EEb/LBlB6pH2CTGfT52dumya+a6vid/pAwC0HQY4UAC2Hh9unmY48mvNeyGaaPNhANUYt17VdQuJo3kwsJWrgjjCCebS3TwWaZ4Oq6RN1RIzhD8NZ1RYAg2NcTUUMykdeY8j1kNEGzIfrWvaYe04H0GyZ75X9+3Q6Z9lgBIABrRbzhfEpcUgC4VYpYNX8B4L5jH1XN+tgfen8dmUP2Vws3b6hGqBqw7g2dgo+U56X+8VlI/yiui38X4qBEqahuiraaFz6YhxOEIkw+65kZq8ySM5KFgGy9wH+qvnM/BzD2ihgyAmhcKplc9hbb8haRUB2HuVwcsF2sBDXVZ8Lu0Jh9eqTrnlKxzcIIjKtjo7pDFLr1iRvr0vIItQXmQPzOSIS9YAy7SOa1ZalG2RJRX0BP87g7qSQDpXJTWDhCgEi1Bhy3AT/kT1LuGS1Y4XhLOAMTu0aPi5tSSC9oJ9vYfqRAkDPszHn4dSF0KkIxpl7DPTFJx1nsjr78YUIsShFy+Qh70h2DVA1NfpkeLrzj1iiw17krA6PoSPxxfs2ki1u7aprxKyEtOwGBWb6KIPPmTKiOwFCMB96ujzvBQLU2ifHwccIhQny/5aj0Q=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

SAML Response with Signed Message, Signed & Encrypted Assertion

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx771e9f93-e526-da0b-a520-d5ed824027da" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx771e9f93-e526-da0b-a520-d5ed824027da"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>GTTJ77JBFutjSjqePdH7Lg/krFI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tBgy3kH7q43qhwXa7/I6yWVu/p9b3Su8T3n8jop0dAFmfwkoWImGa/wHSPeR1O6VGCk5rapuQkj/6Eg7QSrFyA6v3NLtL2LGaL/SpwEeo3R9EN9D1tVGhVt/My5yOWlWd3i0huagERUoWYSL745NDzunceHPyBGxZ3Ej22RJea8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>xHpIBnaobILjmcbskir5Tyz/yikBAkn3FivdTDx50rGCfOdSJtfFVb4DeVPG8jUnwHzX34eVVeZq14prT8aqZ1KzY+mNWRAH7uNsRQLRWkg7pxhElXA4L9hAFPJMvlz8mcktmiLblnybA9qTRYYaripPLC/OxPtEbwIwy2u4EI8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>EtBWtKfKpmJkLD94mV/ed6kfSJ5nuS2g1CqTczB9HniTXN/UA3mz8r2F6DvN0hc1swko3MOxlFmSaUWNUY6nRxsLGhtmGk+XEHXbMD2ArhqVHWWEQ0WVI6fekslA6trMv9euqXTQbruzzGN0mihxCvlida5Ls3vBnieE/y2Hzw+NCCwh3ul9QjW/plyRSArlNncRdhWqznTcS/sowq8o4fvuyWB5QfoIFoTqqll3cdRjVvc+BfIYJWHmy9L/henu90tis+x58JGIZDaZITUfGreGH7aMuCp5CWaeksp0j2WSQ+AsH01rp81p5F34iH/ud/AkMgWIUD8V/aOVMTRACE93KG/GFWqw+QaoOKTaQ1ypQlmPZGbM0806gEZyj4W/Mjy3jm55U/0SavI2njZYLOrn5uvLDMgugj7xM0tN69bYKBIQ1OSv+5MxJAj6ywUkGrWlsJ+a17KaP4Eofz+r7wd3eIN2TF4GXWIB08Zvx58J6PEfSQOBsyZdYCiYZgJcq0fz7EG3UwDMmLBRTTWr9VmcmBjPBZndQYYNJ9VSaxSjHUeqA1Nc1F6UrP5XVCbJ+8pudChfO5Asywn9R47C2ydIRazxBpnYpD6Vinz0g1mXbBlL87kHHv8NrZ12Y/ZpSKmWA2DE+RQxjQOw1i1lk5duYhOTMM7AEyNzZ9MYv/Z527SVyQd2+wCwrrcNqx/SlAvEpH+07LEbJ6XToXOcHlXpDv2qKMJl19QTCOBaGVDR4+95mCvwHM4Ei9KDSPdBO1mTcLl3SM9EBOu01YizdYoyuHk5VWKeg8lppFRcDXWwJEtukP1B1CKkJGU/xDBbVbAl36iTrOiYMYX+sUUqzsyc7EDb6VvO3yC39/lEtMrMfRqH03enewkySwQg6XeZXrWeoKODGpw3csC4zrxls1p97IzptuTkzXUTBf/SI34ezR6qIhnGgqaedMX9AsmbIkhyWolQm8MQib/SEFPK/DYcAsS2xYU53cdhW/jh8tguUfURRbIOBi8elohEo+xNVB4WhtozUSjRpiFuciyNKlhZZuIFUsMJ4CPZQWA+fX3z/SNlmMvdtKB5MEwjijG4FX/NPBYEWY5e1x4A1WX6fK71juaBumUDe4+L86YbJ0RhOHmUnaIiTVuu1PQ4NEbi+avQNO1d6rRE7om+CSeSSs+nbrMyas3p5mQjeNiOqH6bm3rmRodPBosFQX+hJqNesT7SOgwqXwU68FOLFUoKVBVLYMJKqVPolqvIRlsOrzQBbk5IKGAs88JwilW0p/YHBX7YMS8UYunkvHcoaWqeGDnR2k5D9EVk4+NZuaN/vfYJIA+Z3NGPyYkFqIGvmes8UvQgOeeDI5M+MR0PMglmN3nl3RMAMrASGx2vuVXR8sRpo241mfx6chCkLZXiSBv744oTun4ex4s/2YZTUTxjvns5BUUDQ5NaLV2sN8RmHP38cNp0HDgSfYGGkL8MSrv9BOv3F3xdSbUWTIXjXTZX/LjTviL+zgAxKhYdkH7fOgendLqdGNONNucevyJWrxob/sKKcrr7u9tPZ3Jpfk8Tbt8zFRC3nKRWRduciTRNW0ylrm5DL+ByK6nKuHO6EapO0dsaUXFL+isxX16HvdhQbJfQ/l2x0Ng6fQ5mQhOe6FHjMKk557cFxPlQ6spRgltDTNerz4oaimAG7HVEWcELV7qEyNZBu6mSb2tMEYj05I0DUnTjFrJWUuOI+iPoUGmHn233MkW0ggsVC1RJxjBHb/6j7Ici/Q8EzgkW1kGq7ngBsNAMBKbFjXud86GvTiC4pE4dgRQVBXZpW8/K9u/PPxa0TJ4/HHApPGzb808O0nXv/n6L9wikD/Wd9oxWhvrMKx03rLJUVEpzlhPRtHCaEA7wSbftEWuAcoqExpwlPx5qDAoYmEAkdWrFmSrh1Skiq6KBoE3L5iKKWyRsJ3RQyNnoBiAmpMUuZMZ8pyMG/ld1w/Lq8dd6S0H/XV4798uYAYXCQremwhFmGNkB63IK0StD4fhD0yJVKy+HdNxcqHXccbSh/m7XKdf/yGYs6FX6W3g811Ben1L5f755LpI9cDWgAIiBtkFLXEfOXjd8ftd0Mp+cYN9nVOwX9cwrQjwNQ++fYPdn6BVj8Bp6cc1nBIgtStL3jP7Sw+yI/3XpM7FhJ6c8vzgx8w9m8ShEENS6ADvHmMGxgIgRUO4WctPdsXNYfdgzN46IIfsvhAUVI1IzVwW8urutweiqjSHqmFRWNG8XUXDZxQCVXW0cey/UbLghldqRDG8L0r8p+wwqNZp3pTjcy41oNddOHulIiD3Ac18WSky6kCvNuQZw4csTOALIjPIXqvJGeL3+uMaDmLXiDBHWuuehDOdvXppBD4KjHrh+esNlI+aR7bOsGKWlHtZzFUZoUhVQNmdPvCtev2ZJ8zKJzjBAHhWx36q5W3RvD7flJ9BWXA8BvpcH+38JIL7Ci4nobNZfg+JYTrnczpJQjLKM3XqhHOkvwWswMKyaiP1eHn2Dm4Y2p/p7aosZwcZVP42lcohdQlY5tctk1BnlYcrGQUb8Yk+f4cI9w6+l6QDrXsOdpoCCC2B+PcoE4N1RtGpNkqf5U9loqY/9UXdgieP7KOHkXwicS4RiAi9jguTDK3lXaQ8/KW18ajv2seR5U14FG+TeofboUMdGBcMJMmKxrf/K538nOMamnTVpmj2HCE082ghCIk1Lb/wi+g8hG8IAvWZOSMMZOTpFtQq/2Psy9DeeqfqfwMf4BgyzJwdOxs9/1VsuGgUC+1nm3Y6W3W67esLk2Blajr72p6XARo8fFh6Vz1oHkx/GrvGEQgG65a5ZsXUjWXKPP08qXfUI0HcwHQwrQy0Trtgz0WJrsulqVHLvv680zEc7yEGrWLzhFLCUXGgoCzJYwvaKWx40dNdF5Po+tYkEkiDacCHVjEKbvyMXmY7V8k1VzoSWqKC8pGxM1T2kpXffFGlJwZRKxBRFZp5QZABtPYlbG27MnKieYVo17SWJADVOILZG+jUo33ZVbXeszbzpYrJh/HEOV1Yz7gVg0x+ksZ6j//k7fDopSGzTLGcajaKfRjNM77E1aJAVMXMUCXzTg4v/cQsvD27FZDih8cOsBA6KFJ9/oCqq8+tiNbxnWtBugpJOLcnw9kyk3J4/Cx+cC7vywQSK6RHpJ8eXaBjdwnwqnuuMYwomLRM0Rcjklm3vvd+4btHFY5FKdFEkEWNb3MrHsHIuAEoP0Hbs1ZaeB8Ve62UfVC8xwZjgwCMQccOkEwTmZU6faAhXsWm0/6+lzJ4b+ji1p1GlM1lUJlrUlp1EOZFy5i7KrEHZKSeNhmw5HeoIbj0aeQiY1ak6FzX3TctTUyN4J0aM2ir3pK+4SVF1zUws29wBhpdwRH22jzJMpWCV2CHbcIm5FzqqnDQmoNxE4PzxMzudo8Aj3AB2DUbjWc/fa9bgdnhFtkBTIBA98UI4noSLePd8Y9Kg227+65JUvmgUxpnxKCmTxfnN/QYT3El11E1RKXW3AH6mqyKxbsL9rzCzfVU/sB6HX5pERUyhlRi1dok9EScTw+Kr+BUa0wxG5CLzJZEFEv3JfX6fcwuOneY/yV8b4hnJL5J4bSOeGC4GunMUgRkt5Zt84Lq5uig686su+dCBtnyabrLUFH53ynD+TAdVd3bKMFJX0vtOgBf/TAWZ6fDoDe3DjauQ9uMuoxyHCfDB7IVWNXC/coK5QNqD0qC1b11lhg1t7buoLAleZ0surlx30yyVf+QxUxoMqmBDbyWSEmBqNuqInj+3V4BQtb2cQWl/CJCuK27Y7Ljmld7sdmVsdTANxpIrbV4wQoQWEkc/l1qZuYav21TSUn3Vju79zKYkCIwAC4Ebg6OFwXjEF4sNB/L7Gd3WniDbZNKxPpaHaSt+3aZWAWZPngVj2qUr1OgmasGTEf2zX/qlmIsP79ecifc5+3Q0IFSKZWsHg1hT+LKW7+LBXfqkIqi/IxGs+ba/Et3pb7OWtp3HLHytXesxz94afcRHFylsQSM6eyERk/jCdSF5HEGQDDM/ndLJ0whXvNrHp1K/PLRtQHu+h0n0zcOY9w8zkofD0I0rwxjrsKXurbvCJxHdtXHY5ucEmltb6jFmLBIULZ/D3Im24ddTn4SHYaJFuUiHVzLeb7FtcrXxR4NfVdIihnp+FhGVnmwE2i29Zfx0+pnR+lx1inNqVOXa07/IQJqmNvoCkL2enRKR9e31vqdszsQh+udqmGgun1SbB5xCQ1v6XDPQ/O2Z+FkUgpueBksevdyM8LYZrhHCsXJd8llEHim5PFyqc+BO0U+eiiQ1pxNSqLT9bDXlqn/ute1aUMjefg0ZFn0T+r4UJWp8kxWj0D5Y+4USIGY21oumunmzhuw6UIZ57UyI1/h1m3oUrpUewFfDklL9pcJ46TR9l1KD2t7bW+NpT2UZhIkLFNDpCbrvBiU719mZDP/ncz7ul4/dCW75V7HP/r7N45vc8tm1eNZoioOD6Y9fcFDK5enZZN4H7lCq5zVmXwcsCYuHzXaxT2QwYOUCP58lqHL4NrpmUcjMpXc5DftuxKrUXqoVpDQixwl7RC1uEDaDr6Ihj4OXZmDXjeREOOyr1a41bNDVaWhgGApMlwt35fGoiNnDPc6MrU7EdVYVejAiwaAW6OCjuUM/Wnf1hvQ8tarMG4kokmTeXTBBTn9sY02SGsUrfXeTuzjTIsXSE2uHzPoXLrqR244E2/PoGPsZVdbuCDUJQRKivdDisefznYVn+Ot8hXYIrkOgk7hBZsGWpj0Kue98mvwoijU4XFncS2PCgKkAM8UAASyAQnWS9wXxeBQOZ+I/JJbdB3kpTTx671NOztyJR9Uxmpiu8g6nPWRzCZaES0Let5NoouJQsXuaz8SsjnZjHRU8YYNN/HLq88WDJszt3QRU6ty+Ur+ite0z89QMWMM50gyUb+0oMRVFMGdFTYB9z0fL7zDoklHyLDVcj2yaryglSGFphoEjs1e6WFEAUH0XgUvd076L+v0OJL1oGA5AfbO6gR2+hAZmlK2Wr+vqesL6xJhI/RIsryn+p2ie3dv+FGJ+0W/Z9pJ7/XT0xdJi8BwVf6KPFsZ+frks6sGfoP7WxYCZ/mhM63dVpej/LrZTLZjwKbtfiT7wF7XkpB7aZlNH6tC6WrKnKTUK50HfMw8HRRolkv2ZGqy7JQiofWDO0HqykpqaezmFoohaHgLGwSYsXDEwwbWNxbkWFaDQ1LrM8ix94v4Ceahj4L11XFWibfs/kr8fHOhV2KWor8jJte39g/clO+IyXRC4U4je9w+YAcyQ5Coy9WXuy/9fmmzPYOkqH0DSkzt0VTRIUqibEy0JaSPriELgdCxbpxm8YJbWe7aQl2DYiqwUxqzJ9y2ppE71GsgRQLDqEZHI0vjFi+gBt082N39m59K47jxq5LupV0AqSOVL6+fbg68KCNAMGPwkD059XcPMydZabW/NlKf9YBo3G/0eaxBTJsA=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

Have a Question?

Found a problem or a bug? Submit a support ticket.

Looking for walkthroughs or how-to guides on OneLogin's user and admin features? Check out the documentation in our Knowledge Base.

Have a product idea or request? Share it with us in our Ideas Portal.