Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxbcd1cf1f-08ad-7dcc-5db1-caaab39091a4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbcd1cf1f-08ad-7dcc-5db1-caaab39091a4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qhSKkNE8blg9H6RlA1rFHDR4Yvk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rR4XOLFZY8Y1r//npa0A5bB+WDeCJsMBqbba5G7FSUne4qPRtUk+2cWzOy/GxCp8/jHzI59NkmIFvEAJr/+Eu/L1kicfKk31Z6GgGhH2N8nOpfcSZjouxUh5YkEM/+USaPpsHkJxdG3g8brxmzH5YW4rZUfSmmDrk46U8byu1o4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5081541a-ecf5-b7fe-40f8-f4df089bbdfe" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5081541a-ecf5-b7fe-40f8-f4df089bbdfe"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>vi1oMj2vM3aBMLeK4guz8WgVZUY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aSzQyA4SeQq+BXhhUD2GfXN0hYsWfAEV8fREgGKMj/Rhc2xG6TRgnbgnRD8RzSzkx5e8JWMgjFNuHdeQvje+JcejmgIXBOENu7pbdgsGa7d1tIFQVhxK83tTIa8587Rinnjpn2NT19XSPFzZoz3Lr4FBQYExX9UP8Q9AczXT7Qk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx486feb1b-cde6-b132-9e8e-8c6d4bcbad82" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx486feb1b-cde6-b132-9e8e-8c6d4bcbad82"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>wvZEXKE8Q8NZ67ScqSAOogHHGco=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Svl0VgGDQ/uZrnPCxhrAhiXH2TRRSVK5rwItQ5W7Y3tC9yaxcpxY6PxXIV1s/zbT++JPvrUaZ7k6avko1YatPwRRXmXikIOR3vAGHy5HqFALvctlVcLLGLQH88S2XCUB5/lEoL/sfEpWYstPiWjWWKKbXM+rphjhk1gRB756ai0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx8d6f5571-5a68-d570-b465-4c5201464fd6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8d6f5571-5a68-d570-b465-4c5201464fd6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>wbHkp4XgEi23DfLNHJvL/jYinOI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Teqw2/orqdmGoHff5kxDr0pwLS/Ji5gMp614ndBK0mt31YbjBYJkg/SFN72+gCDJ2Rt8Yon5zJ0i7OY3lVKXM2A2hQ/yPz9sQjQByjhFe680EPC31GKPjxvOuftRVjjk67tAaci1T9SAZ5NwZsg+A1lRa9YY/pyoOqtJbumV7bg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>mjT4h5oZEZ+nnrqRxwDlhSFZiZFkKrfrzX0FQvNHzaYcFtjCzlpHGO5f30hjxYChTIri6vF/IUsMaFzgyliE6Yz43+RK39tPddhgLMBn9uB96XHLPAZ+QiayB0/1IT0UjnuGIqx7A9t5zdagVvdOBexknMwtDGD0u/Zo6BH8QSg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>CmNs89+aptMqcJdT3SaYh//8/93PegHFq3n9YiRRUVgSDW0xyCd1d10tVSaaVcTKclWQa6CVW/V5ApkPLpuul5VOrvh1lWprC8YpT3S09zAThAtZHLrbLMWz/M1XXm9K0af2ZBJmORCutxmyCSKqMpQl16eF0DUs3TaVnqpBFtk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3165d64d-926d-bdc1-bd0e-a9d350535b2e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3165d64d-926d-bdc1-bd0e-a9d350535b2e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>r+QjBl6pVvlJN6hlykzetlpBzM4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>UyZeKyKw8FSD1QL8Vn3dKuve8MKLH2N6xV5ojwmOj4lZo7TsKiVzbkPhLyFe58vbZofpvcOMPADjDC5l0rWqIeqzgoFeJVbuL81l1k8Aqg6susmH/X3ErAbQXvUimsb+uxE96cNq/9JZh9hkbx1lPrcmVgg2SyWv9FgZmghgP9c=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>mjT4h5oZEZ+nnrqRxwDlhSFZiZFkKrfrzX0FQvNHzaYcFtjCzlpHGO5f30hjxYChTIri6vF/IUsMaFzgyliE6Yz43+RK39tPddhgLMBn9uB96XHLPAZ+QiayB0/1IT0UjnuGIqx7A9t5zdagVvdOBexknMwtDGD0u/Zo6BH8QSg=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx273251af-df03-8d66-a2a7-2f5ad3ee847e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx273251af-df03-8d66-a2a7-2f5ad3ee847e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Ij0s7aC3PJ6BFMOo8BKY8jUpGMg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>1vJ6r92vD3tX4kMvyoZQts9I7O9SX6MgSWv1kvToIeU89GaZv+OaC54KkhAadSK8bgcm0ihaOPL6MUzRUNl+NQa4QBKhcZAk4OvbXDb8Bx1K97/A02U7r+1Q7316Qlm+8zF10TS7Ot+gaikdcU8/9VDEN5F2OY7BblqcTAihFuc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>CmNs89+aptMqcJdT3SaYh//8/93PegHFq3n9YiRRUVgSDW0xyCd1d10tVSaaVcTKclWQa6CVW/V5ApkPLpuul5VOrvh1lWprC8YpT3S09zAThAtZHLrbLMWz/M1XXm9K0af2ZBJmORCutxmyCSKqMpQl16eF0DUs3TaVnqpBFtk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>