Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxe042e273-3608-6543-80d5-969c6fd194da" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe042e273-3608-6543-80d5-969c6fd194da"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>SZPgaaQaKC68dCCZ777GYFzR+c0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>RblT0Q2nfxry+Ss8ZUNvz6qZdIQUBQ5OnZs1zOeV0QehYrDYckcpbpDxkF0zQbkK6Uyal9poN9zfOqDYLNhpqXuMIn71SFNAxIVSlg/F130y9oXLcK4oRJIkfNXxf4mBl2mNaLNPvfN8ErmLU7/iatlhkY9EI/lOfmgkNNTcJEw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3f2de7c5-6a7b-8af6-7256-6ab01ca9229d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3f2de7c5-6a7b-8af6-7256-6ab01ca9229d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>zRzQHCb1xHpWzzCoK2JH6qc4COM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>jAnszUsMo4Xdmmv3BcvNvfTSBKXEG/V+udY0M3UpJpDL1ym/R8dXeNKYvGCM4Y7TYjuU2TbSapJXlX8A0E/rZYLX6mTmIws6p8GFFcHdEI/fbiHRMfp/jszgkvVly79rh+h4Lp3j+G0YIfXiIytyIEL0t4ItAkUxhjT/+m6cxd8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxae337be0-8ba1-8ea4-8118-7c1daff34e0d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxae337be0-8ba1-8ea4-8118-7c1daff34e0d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>4+ccvr4UP9m6lJ3sCWHTzYteeeM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>gk3brtfehqDy5cQEOTEMtvz+B5qlYRgltPEwR55Ydk7uWkK1GHGH6EhXlVXZPJY/W/MYYlyLs3EHcq+gCgYyAbwbKyRatgQMfM32Kp8GBWR1bCCrygy8IHqL9Yx3cNrTn0tyEeaviD8m2oFK9MZTiRQq5Pjow8yBDYm7KAIQdTg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx69d74b28-96d6-b650-9883-45c9efdd495c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx69d74b28-96d6-b650-9883-45c9efdd495c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>HHLAChEVQDzJQ4uWn2ArpKRxrhY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ppEjHjhmVdBXxacqYHxUAMlyAuziCIFOobMfWWOV9SmpmsGnoqRa2qUZkiLE8DHWEidgqEi+DRQl1UU7GQDHgtv1Hk5Jgt+Rh6MvNS1CLYtz7of5psPNR+8zCJ2NNeGngjmFWmQeMbH60oKcLQYMriY6FMo7q4yBssuCrox2s2A=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>wX1ss8/1n83gRm2T3TJ1MbrDTG43l+S5MHmvB/uA2+wzl82nsvy7luGCQPWy8QnWFz4OJfpvGqPPmMOPPltN8y7gKrI57yd/5ENAe4jb/7Uo91ZQ5gb24dKzRFuhofEdl1ohak6BQUfbl8YhQ1CbBnAV77x2uF7f/HqSg00idmU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>TGTGf1BPU3I19p4wmBID8uUf3sH01ssLTQivFgRGB/0k7WyJkC+X5JdH2Fy3VZRlAFamFlXmH7pmS19EjTtwTiNUdhtHvDnzYOgHN51LE6EFrL6WOB+y2ReJ9kvZHwRVeG0vCwB7arSMAU82Z2/9+CY4YWclu0ymcdYk+g3UAPc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2f9b0839-449e-b2ca-6d8a-eb9d89418404" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2f9b0839-449e-b2ca-6d8a-eb9d89418404"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ma7evaoQffwSHxSO892QfQHhTto=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>xHtXmaZ4DQQ3IsgeHcqUjdfNCrRW3mvpoW2qwnbccva8cDTW/fQz0pFatWuQpF/grv00Zpq1XBI2CvlmQ3F58yk1238iXrRskq2Xm3NGtckFosEj8r2t1yZqHvjhjgffEEVhIzFFyquP68hUz2QnRbGqmCqLpcxVOBvtd1+CPas=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>wX1ss8/1n83gRm2T3TJ1MbrDTG43l+S5MHmvB/uA2+wzl82nsvy7luGCQPWy8QnWFz4OJfpvGqPPmMOPPltN8y7gKrI57yd/5ENAe4jb/7Uo91ZQ5gb24dKzRFuhofEdl1ohak6BQUfbl8YhQ1CbBnAV77x2uF7f/HqSg00idmU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx89ba8b0b-3308-007b-b4cd-b7671fb5a42c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx89ba8b0b-3308-007b-b4cd-b7671fb5a42c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>v/UDuSV40zoaiDzCTPpOzYegvPc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Jugz+GG+DA2ec17ft5sXNOZ2W16eNZvPo/8vm0+WNys7nS/n5obp1RoyCx/rngrY+RDW9C+3VVNRHeNkYhGFtOo/CohcRB44LL5jhUD2u57qG/qKpoJvBkddAUPC0UQBO/2TsJ2+BPwui/LgKZePUW4pIGl+5xvKdgoORLzcXcA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>TGTGf1BPU3I19p4wmBID8uUf3sH01ssLTQivFgRGB/0k7WyJkC+X5JdH2Fy3VZRlAFamFlXmH7pmS19EjTtwTiNUdhtHvDnzYOgHN51LE6EFrL6WOB+y2ReJ9kvZHwRVeG0vCwB7arSMAU82Z2/9+CY4YWclu0ymcdYk+g3UAPc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>