Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxd1db7d1e-1e2f-9693-d595-ca1ed3244a7c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd1db7d1e-1e2f-9693-d595-ca1ed3244a7c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>e6Lv731aAyIjFh9Ri4ak46ROJmY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>IIQyLMyHKSi4CL/VbgJ2TKcP901IsKX+mIoSuSQbFf3FkQ6jveb37ONSue3T0F9dJvILEumWQeN4wpy5SBIyM5j4r8Wz1GCo39OICNLkohsZnfHZ0UiIbbcuTJK/myu2fDTyq2jKuHwmeCdHux7zldAb6YscMN7YyLRdSmYg0gw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxa5101dfc-63f4-d604-80ed-399230892067" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa5101dfc-63f4-d604-80ed-399230892067"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>1Q1USDh+UaBngGvvkLzu2XPy1AU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>zAIg0kkgetnaUH6ow3GyZm74GU3HFLpOO/2fLuU456ZZXPYY8UCQE8Di3Lvg8kehFH7ZZukqu1t8I1W22u85uTL48GWFHqypJsnpgb4KeQkK309wP2VW9JJeMMYkew3zaGd60evHNReuEB7+9sY3uVHsMBDlRRkHt+5Km2DYtqA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx001dc07b-7edd-d652-4a0e-ef3d161fefc4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx001dc07b-7edd-d652-4a0e-ef3d161fefc4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lvN77JKnRhG3EtVfpCfdaxDdUTo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Z+D257aXul9OzamuEtldlvyvSdXXrlcXu4QH49Fs1iZ9bbKYiT17eOyq+68dMulFklrGv/tH4+q0KfOpdThylh+JAMAYXn30hKUTzbhfuxUbuUMru2a1qpg3kBsf4knFkIk0ActpbAIyMCyTtmVKvEzO58ykvZ0A3k8UPlkdH6U=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx691d0a72-3c68-c08c-0636-b15ef46ca6b0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx691d0a72-3c68-c08c-0636-b15ef46ca6b0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>wkZjsBGM3vsmgW2zSTzA3EZmF3c=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SsJVeK82KcGSqx2DUYZwUOsgtB1SoGCpk0OOJV1hvXkJFGYwd5HTeKXJKpw+oYW3mDh0TerRFpfxYfK3kBWYy5pNGyFg+pXMUPfcOT13td4DKZXSwgYaym+wWIEHVGRpIveIB5X1MgEZsMO4f3GzKX6B56zC/B5ugwN/YGHFMYQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>oWJVf/WY1QxHSuo2dwmvpdctP71BDZg1AQfSa8DIsqcBEWiyLj/kJL+Q3DLVOyYz+DZWmLrJM6PwQDIvnTwAxarhWpEbHro11l1En7bDhCgnEd4mB8uaaNggJHzwffU99cLU4JxnReJ+VaufFO8viPlzsp4ZIQ1bTNZmxtEjZuc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>y38lse6vlIm+WPY22FgZrJgA6A9TxUpqPKmSUdGFnaz6DJYEU7/LfHUW9PqkQuJTd7ErKFuxtVo4LrxUpubio2CAuslc25n95z4ptn7DTZrBYLxdVpyZfgOOhkUHidwK7twokvL77oMjTnmz0o2x1Zbopxqr93zEJgrQLu5NNlZDr4+utv0W4PggSa69xcxGo/LdAUXiuTvRNfGB3wR8xb7dhm01sxKCyIZGJGMo0VoylEoXi65ll6/smGp02ODLRcZs68zx9IIW0N0hVENjpdL+bt3MKAG0HaAddM3o1qgC+By0iIpZk7z06w2R35fjihYVd3dj7LItI4EbQW0WjplHaR7Jk0Zr+EGRdpVhJXumQh4VKfV66vvPOVqL5zjGYsTNjODesECk8JUcyH4ibbwtJDL7F8XR82Qmbr+qNRA/GZXxI3+a5SVFo4/TRgVnZraHVEe09GfGBtF8zq6zqL03i0QcyWnjrHxG8c9XMyL1nB7d+BfTd3PgkgN+gqj6ndrqd7ss/VaCjtG27jc/KWNZ3mb7p+RFhnVT4v1MJPwQ6qXEiKz6gvxbIIKbeXKN+CeDHJ3bAN0AFwJIyFz2Y6XgRnayYNpiPKwMKEKmrWxZbSWroew7dWZapEbiVe3X9xXnUUuNsWvqmRrQBi16b051FdoAb4Z7P0upcqw4i2ty/ZWs2f3DkagvuYvw+wMgltLwBnmG9xJkwa9eEZm+igswVnn4Opxh2MoSeKDZWnSttcuar5C1VqAC0S1Cew/BaAhnf6WSJXGs/bOICM70Vr0e+6/A42oHcTI4Mv9JZDw7CwHCLqnEMOXBy8TzlaRHPVbXX98uTFLM2WM7H4xOw2yM0BWD+2APhdhzTPqHpbZFvA/U8Nrk+r/SpxbbqITGXcouc+bYo8kS/x5goIdo4RlKBH/BmTXUbTATSsX5jmBg6Eb2c+zxEpzifd6QDpCCevRuqIsjtAN2apip05LbSo0tUegoWoNLjki45fwYRcB0fECjwvKUlOtk6uvhcwZ+KTTs2JvVX1Xn1nHB6qT9kMXKYv1HxhmewFDhVDKVqCFp32WsqapU5Kigb0iY8TcHSw2e6FXu2394JGsnzGEmNNOReJoJ3FQx9Wa9o6hIenGy+yFlmCXkXh2atazj0RnMuDEFLp5wF5NcVl/2+DYWU+/73iHmTWm1e4YZRQ65gqS+hSa8X2jArAD8rdQ84nC39cPB+YUXZegjX97wPhpIHnjOyVnbrXttq5IbxkoVA0KwRhSYEdno7lEbXOBmUV2MV/5dyiqqIdQC7Gp8qoJZXdNqjIk0bmRyFuikRT2YqqqKl+oeTVledDb82MQEgwCadfh5gH/Ul6JM/KN6peaLZuh4+MwYebD7ayOv5mjB7u4tzOaw2uSvlzl70AZPl7gtky03iSCSRI0jgOAwRvUmHtPc0K4z547ULV1KgrVem6rKcpmxeC1VLvAp3Iru+5k+YUzyRrGSa/AbM9Ol89n7sfxpA4fYc+xsaR846cUuaenO+1pyDLXYkDX+WevnTyTtbOKU6HJC+pdKb2iKPoUOWdspp5jJWHYbx5JoQ6pQ841QQNxVOPKKbFlXqsw/cONBzWe8ln5KnWGFPpWl78Kg5KHuNQSgGIouGHNhurrgIro0ibPLfxy8ya/V46GzBjTwBO1jt59H3FArKcan5vQGtJgApa++M5agwaLkv+PqgddEsUM/oEJcKhErP4fZq74h+QR1ABEQm9mrIX9eJX4gjei4TFjbJTtkCJ8J0FMdm9XOd34qk3jfdwZJa9mv81+NLBQvRQg9mPVoTd5gJrAMTfNRfyCRj6D6cgD9vSTHcHXFTY6xPeqsKv5G4Dr3XWsuz56t9a9bCVUEAyoBs+91yvVZ8t4ErxO+kr30gY7qIagzs+mmwXQCqC80AaiNDheWFbziCqpU+XuMS7fBwuHgHeUnLIHyeCiI2ZOyNPa727w7AbzLTuKxp3HOGZtOJNFj14q6wUBEAui971ZYOvafOsC58VPRhFL7OI9Hh1HISJlzYhAkJt1CfYaUE7FWGKY9EAaK2e7N3ODoeL5yVT7CztpnJXOuD2Q2NxCTlR3hesRzRmUpSuKMzPMwCmGd7zs1pECdMuBnlCQUgeM4Hrj10ZITLYkDVvnyTvZouu1ApkkR2paENbh7VRr+Ewh7Om3ZBVFn3lhYDOiOTTxyPVwe577B4H9ibj76qhvZjpqHQf2cKjkUDfK/in8SOGw4m7Dk6EfImv4PLucPcs5RpkRJOA0AcqCoGkeR0Pmf8Wbz6XMQQKhja0P69JQnmXHo/eLeOlA/OAKCIA513Od5Q40aTTPwcUXXXr+ERDnVf2aC8+2r+XpslIgqUzDulK6I9BfBmwDjuut6y+5iksJq2s8jzi3udjXJJPcESey8mGk49HZqQNmfD+PRsJgtb0//TZphjB+MQh+8WEN9nTyjQ5pZGwQmejehzr1NdWaNid5R8XQOSi2FGqiEiRG+w/JVQXw5McbNWXAV5ot3Gn8+NefolyBJ0PaRtrgiK4NWCWsF2Kh+2Q/KQPdahKYpw4MnOoJKx07nhjNvbVxu7xS0V42DwStzbRKJ+WYE31POxhSVlECwq8AlRb5PsMKownNOgJsAk6bixCHJ407cfhOVsIn/7FRVhQlugaFJG1k3d8PlieHhkqCaiEwi25MnawIHOr54MGQjwtwD/JQh4JD7iF6eak4T4Xl445iZXfJWwJCvZJS23g3B/i6cCDvyj/HaP9b1ckkjVaeNdjnBuDnSp9uq3TeqlHsclNmyRtqYPy+a/3kXPqDKHRb+n7blxNVdG1gJur6ltIHwohWxQTUZRTQyoOjQDGNJpg9VEzdIDR252zs3eWgaqsAthKmtFZ8HON2/SFAMLYZ9cw+vjTB96hWKuK/MLd7Rl1U2DN6qbET0LGA=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PNqi6VJBBuieqbCjqbGmsmW4vM9nhhTEghpW9yuofCt/f4nMbVKwefeFio7dy6bSV3xEwA0ciQXjZ2j6+mI6u8vnOdrV4FMPZEUjb043Ky9EJha0o6+14Wuya4n4zCzPDB4bYG6zGQHZ+iN0UZK2y0N/MrXW2pTtbQD/3QCznl0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd43db711-1f9c-5630-1f02-231e900f68b3" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd43db711-1f9c-5630-1f02-231e900f68b3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>CYXYEmKGeUAIFGRoa3j+7BoG+Ho=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JXGAB0KUhDcZ9kOmA4Paexmprz65HNhFeYglZd05L3i0RNOTG0ShKwIy10Kz8aRTUPFE1Tbqftj6byAnp2fs8XCAvCjxsDTJhm/bZPYRrz2evXAeftsTTeR6x/tUwUpIODmoGEi6L9I+VzxCkOD5v3ajCYrPKODS3qYBMnsg6C0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>oWJVf/WY1QxHSuo2dwmvpdctP71BDZg1AQfSa8DIsqcBEWiyLj/kJL+Q3DLVOyYz+DZWmLrJM6PwQDIvnTwAxarhWpEbHro11l1En7bDhCgnEd4mB8uaaNggJHzwffU99cLU4JxnReJ+VaufFO8viPlzsp4ZIQ1bTNZmxtEjZuc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf99ec89f-b8bd-1bf9-f01a-916a11a6ef33" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf99ec89f-b8bd-1bf9-f01a-916a11a6ef33"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qkdPz4aLnbx7Qukczv0Hp/tgnBw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>1CFTzCJ64bqf58RUSG++5ffWH3BPN3ljvLz3eqgvhUEMY+7Yn96QJTECs7aeNiRLM/SedbZc9WI9FAS+JM05XBEFQlY5RHor/gQgTtrtyrkMuaMaqVBLouUtoERHhJ/VO0vpMKt+Ds6oLJpxBHxeNePcVUkTRcRZJhQZtHQOer4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>PNqi6VJBBuieqbCjqbGmsmW4vM9nhhTEghpW9yuofCt/f4nMbVKwefeFio7dy6bSV3xEwA0ciQXjZ2j6+mI6u8vnOdrV4FMPZEUjb043Ky9EJha0o6+14Wuya4n4zCzPDB4bYG6zGQHZ+iN0UZK2y0N/MrXW2pTtbQD/3QCznl0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>raWtAU0iEvjRabyMxPFHxLToljo9YQN9FfEEzr3YS0Bv24HYd9JoGOUZniIHUHgyQZo9nzV2YjusegJF5G/r3PTcMWNakCxhNmOGdFynetkw7ytzEf4se6MKV1SrCpfFtBM8c+7CQ47auixxJ7n0Fdam7AnvegOoYLWzq1fv8QT0X3V5FD4DYyJJsIxF8EhmsOu3INLuanfOabrA+mf+LaohhQOwd0V5JY02o1HkNwft+WbvUZfd457T4Py03ipHkinMDLbf/pzbsZNT5Y6gUD7mmsNekqC6wR3Pb3BD6EWtp5Xa4uoBftBC3hAC1gPoK3B+oIHvw1j1rfF/RGRAzGO3bGs+tnZV+t45c3tIGuuibv/iKQtlSp+Ye0FIwGcMu/qcYEnfP4Er38ICuxyYwXQ3zXYVGF57fDB4b2rbgIXve1hpNTNIm5Nzr7xr/2VCvLgz/uykqPNfluBW473MfPrOoMsMZu3ZrAmxZfN0tyh/t4wUipEkrqG4AvCtFC9VsxPcse4UpimV8mIxzJGTY8L7sSKbw1sg+d25CDlNrM3wwjjLlGZa39lIpoGCcjaJ4ZN1K0Zt+ZyG0serX2K7wDhu2eg+0UAtRp0jGApvzIEFPWPwERamFBfF/E+9GFXST64iwI0SD9UqjY15MjQBWN+izAck35bs57weBpBEAw4xqbaMTmsJPL+zrMTQNBmuWilgUlrJSx844+eEfvAPCDieBSUWNaNWeCPz6YQc/hjCZnZTWES6tfrl4DZTG2H4JVmpt2Re9YydaY9W7DapAWK5ghNERMyc1FOIpaNSx1yofC3HZ0632VNAuh8HiLJtzFms446rRpiB3orqF0PwE3Wrt+9crEoB1gArNwaQ+RU2O/ZT/jUrr3jiAYiYgUs4tbeh/5fcZhrBnnIX3uDcJtJvwHIB1r5EO9oUX84a5o/QFSdC3gTac/Y1taaeIm9InA/xN63nF0gwL9+TEV4jDYzMaK4BNZA8s/1wwFQmuqCRGIC2RHpdJp1aKIO/ek3SY+d/6FhqeJA1aTZBgJ7amZsAApkW1JHIkVjibWQuw0cKt1q8WnJsBCwFTHH36TV8aHZN/7uSQUFzOBH7djdW86Eiw+zqjVZaGKKFwRzddw3pgz+0TAMLmh+Xe2+cSyryjpVZ0qrL5X3loU+xxTDbUfuHQYKX0kCOricH70hEgVctKPOsynKW81s6VBYjbxPuW/TWxr/FGjHTCTrKEaHJ1EpprSPaW79pPUP3uNnujGP4ZUaaXNbh1svUkN4DnN2SmzigqceKbLmPpre+iOfUsZQsBlfoYjhbSXE4h6CupmsM7oBkDl6hyZbT4jLaiso/klCD07/H9X0/ZT3kDhlk9Ua5BGKtQh8V04RuHjfqM9QblC/YYkgt1A9PpisSI4frnYafRx2uJLEhyVjiKs7Uxc3L0yFh/eeM9sqmIi2e/EcIVs/wRANx06RHRIRCg0YegZxI9FXUCDPk7vsectxGF9O+tgiYrxO+sVpR1Ux9t9/0IbeHn8Vcp4IzvRYdaaD5T3jxaLm3nZpf9XmjTsHsstzEcdiucsRgcPL/I+VQxf/gflJp+AGKyr+TIG47oV6qyLpnQiaCuRYdGKAoRRd7OhG0WUQrDT8X09dSEVT61yP9TBPc79z2pVCKqFHeHMfppjPZ0t3GSLMolynuXr7saz9rYuKKoj0rI2yiDp9FBGQZTezmzqbip1n3xPZMAZkicHHutRQgaR66IImCTlpwuKzvTEnSFlk8l/fWVe+W8/izksFsn0WbehCDDlk14UEtwByfTYnPYZ+CxD7DUHcjsBAv6vSADkOGQp/YMM7+eCLLJwGRzovOKqhMuawNqLVHBEahBoKALJDk9AmW1t+T4ekiui4nutk6WjASl8yaJpRiuVGFl8wQQc9xHVlfaBLu7zZe+ygW0GoxOSTTMqF1WhPTfgepTjNpd4ThfnOGqVcGZx6cDHjQCuddjoHMPGBSIaUnG15rHjSs0voZ+bun5+EPi6SG24nQx4OayqXQFcph61joPkc49lKs33F1SRbnvrwFN8HpF8N6dewBMoVjIwuJUpspDBWf4mv5RoJ7gWCDg5W9xiChWHrWuMVmxj9pqKWPwh0arkSKJjNAwt/Lx0xtsTIeW3EwsHY62i7kY8Njmh+4NgnOjJ1jlxf0ufB/5oQvdWmrUyODreMdIb2s4siH2etNQXhXJb2nzkutMp7eykCvvg+xeqhTLSFa+augLwB49hnDxdNsHjhWMSPo7fGpY9Q1yuMrUXf0DcvKBb4/zxF69M5g8e1rUGkysT/z+RWeQ6WldCEIQSn+EwY3RzjRkERKjwwxS+59uX93fqvcQk2mXJRAxkx/g7+yDU1q8odX1NZq3FA0+43u4KcUkDAdMDzrKHz4jZ/c1PzCj8X9POlSfZ3rwYyus6ywWJRd+vI+U2U0GSbtzl905h7MrllNFnUMXe7z1+Px8bX0LlmnCPU7ceZ3vNItwAi7GMqftooSWhyZFGOKLeJcxUpudDfALuEc8AOGhZq05N72FVeojJLxdsGzEe3I0VFPciJm0JQIMAHtG9VJv4mHykvJnQJwx0GknnrMiercyoNjHXJ6r4eKvHkSa792n1YPv+83xY/u1vIcgnDDGcUpxoI1iBKcl4EBL7aCvgdbFqKZdZ5kCrcjLJT7ftKuspX8gfBwzwu4ooR5QzLVQMZgBXNWNwD8N0h3oL1v7NKvaAv6sMrpe8XiAVx+k+QaMbZExBRVqpdQK9XL58zvCsvYvjjN851ChCGCGWJKGAY/PC6U6DB8pgPeuxqTbki7L9Q7dQeluelHQVnqkHbJy8eJS50ufR2fcxCr4Scy7qMcCPYcPhVwmFjUw1JESXgQ5IIb8//608p6ZoRThDC71VKL7QA88yybxyHVbVoKTTqEv4L8lm36SV5O9TOpcTyALtjyHeW1/azPknVAc5IEqshQ7sh6rX2Yeic8mpvIBJ0Gg4NcR4L951MoofG3HdFIXgP4G2u/3H7vBrMgcQGk656fHIcLjbiK3O/POa03wRYsQMbMPvc9zDFY6OLvk/KsUkXmtkDXQ/JQcZs6uXhQ5fDofGSLpfq7NuQspp2dQSR0Udfdip15uB78cJAEw0DYSbkixLvndJqoMkp31LyaoxKNwc9ORcnrrkxbtlqmVOjJmfEHkEeV9Gy9KfUNCUu3SzX0fa7r2D0+LmErdTY/JGn2rSjr8zmrPGXZpDuKiE2yUMCHQbOgN1eGKsQzTXMQVmF580oEprxxfz5dRlNonoWNZT41PbGjIVChZ8IeeTh1+Yfu+MmhpMajvvig4VETXYtk4UbUYn1RZBfG2CQbc27dWMDA/A/j8Fu+7Mt26PS5hyokrSFIQzH9DVcxA6JM9Jg5PyATHNxIPxcF1mDlqN1Al4vvvSR4CJZOy5BTpjPwyyIRsQiyz58Rh+6yXDWl8CjWSN3Lyn3iXzZQ/+vIl0QAm2BwEV1kz7wQiB70Zec+wMc698GTJuk1vaUUaRWMDwW95QUZpVf9u9bZctDbEwrHCaxkgO4IUF++C2hDpxpcP9fsLcGCFyxV/c6iM89hCFYf8SkYnVu2qGwQOIa/fZiL9hghjsD5AEavXJUXm0Qo20QBa4Ka5Ohcnjqp0WJuwVYDzW45Y7+Eahhx5JKxuKrm6i3poYkT65Ls+SR5z1hOfXAfGZnIC7IJktCXzMADoKcAAI+CItUf0jsyb95Jm9R07cDb9DT8Fygrx1+0YgbMaVHn/QtQqxmwqMuE3IypK5tW5ybGFc1EWS99KMR6kBzyF4W4RXc8Z2pNqXmD24NAjfHSpz+RVw+6N61a94ho68c89jYuPGH9f0eDo17SoHcdaHqPcueBmG8pdelNBRN2knhKF2LXv4fF+DF/HGrJZUVR2FM1AJxNyKlWukwGIq8TPk0y3beGPYmho+QbLOBiyI4fnifV7XfXsNNJmjx+55hMtx6KASQq55BdX1m5dPoB9tB4X6Ek1+2vM+Kq2IgGUNUJXMaKYC9IR8OP864KO3Jf8VrC103CqU+3Dy4ELatb5k+TJDIp4+MsLzwFSVyVE55yer/M+BxzdvyZ3yJt1fHvVYloEq2XBTEYqKuMvGpWcVPA/fxfCKcG+rYYw6uIgmA1xZeOdeC/4hIN/E8IR9n+la7+mRFvg7LDh765aOYWRnk0dkd4HxoUtJ0OzqNJtH0WgB8WjfHmHQJG4wdfr87aNBipLe/dHxmnXa01TLPTxt/qi7l/caaZn271f1TonaE2xZ9+E1qDta9GrPdrXxvBmaGQXRDnd/trk7qTep0H8Ga1hJV4KylymFzGEmiUtIkcBKib7QC/vleCyZFcYovpeDAwsw/r9ucRhKDfpca17RT96wbh2jIvCnIlE0JfoNzXMoBG1wx15W4Qfz0PA90y24gcUVKdfH1O5Jp7IPZvYUy7xLEs+XKkNduf8YGO4ahNtqMrpGOCJqxrpb8e5eRg6SbFX/L6blM13dMNDJjuCrehqpKMJGb9bAC0XHnlZla9NS92tm9aAgF30H4mYP00g4Xsc31JHrxoONzvMFOZTB5I5y5p/xaWCJ7xBF20lKTkX9vJy6vOX1C49t8NxpYBwGkc/fVmf63x1OUCEo0tqMx7FbxxNJsvBFUKsIlerc775WioMTI0W7HuWs/czk6dzXUdhi1l2rTPo29thZ72GzyO8M+cnlihnRd0bSBq7+Uqof3S+mxwB8Y6HKFO1qMG/Wll0RAARDagM51FN5VbH0u+ZRUp3gALTXZ6RF9DRidcXAbaTwXHgSkRl62HvrkrsBt8+mw7eNNQRPIPv9iIv0sMgjbRd+7d5KZLFvKZ+8KBXWUFICYolGJxLBwZSR/ASKal28cwziN5SFg+yFYZJx7qDVBwJbJhCD0xyTRYT3dp3uLmJC9KlTT/gKTT9xp7WzqEvqGLYhJdbPfMYnnVUahKJvujNTeuTT0gxsI87B5PEqKJV60oMmtrYjG3SOJV8PeHy3M5ukkObJM4+fcgUy3CHRG8R/xEw3py9TXw/WasIag6cTIVsflcpQXz5BkP5YS+SmRPmtcKYVjr79vyFeQhGsFonUbmr+GYStN20wOkPUTN/SPZTfqovcU1ueqVOEoz2YaDZrwp7OoTVAYRq7ySqE6UOrTsrISL7rhgEJoPJ7gFFbrXVo0I/PtmRqp6gmU14f5EhiqqAgFqcZ0c75s28ZdIEQ4Io/LzZhk4MyOgY4c10abmIF0Gr0goNaJmDZt1pBfRm6F6IFpB7TB8w7IUmG3sr7SQdSYxd1TZMgq04HrivrCpMErPKPFvq4VO2yX3UYPtpPH3yMQO5kgQ27VzGhp27ALAGQ9aYQlCh/F6geuwYA8p/4mrTXrhKZIZMNpHztDNjueub1Kx9lLvnqsFQHPNRYrlCTzpCjFE8tTCFbVwqnbat5NuF6ba0hpZOmrIBqApPbEhRwT7CDo8Cfvfs4IyYdm64s9HpMhEEJGk85k=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>