Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx3f59d247-7e41-2dfa-f226-a8ffad847218" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3f59d247-7e41-2dfa-f226-a8ffad847218"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>MLZ5n2qAe5xH1VtZjU5pf6l2L6E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>NKby/AKwYBprEVRfPNIZdD/Shi9375J+LqXa7SH87E0AgcdlS1ve0v/eCa6/7EHHcDA9GyrR51ddhIvfI3slNHbG6zuQkSHSegQtgx+jA7YcLyZ0aRvUzNWBZZgWboye9PZQvoCxBz23/cIRR+Yw8aKxR/XOQp8XKHQXse9Rkgg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd351ea3e-10f6-24b4-e538-817b0b857969" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd351ea3e-10f6-24b4-e538-817b0b857969"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ZzYS2SVp9FiAOmrIRhYEGX8/4Lk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>cWADsd+4hqluCeXeQfpwFi18Z0B7Tcusxs2nWJzWYJtXZCTF/a1k032En0Pc7jEcZ3ooCGVg9ydGirrHgpZR8+oIH/yhD4K6o9O5WmnuJNfSAZclzQCoICEdArp73mzXj8pWJ5tusylCznq8AoU3jgOiMG3fwGHjL+RtRmY61lw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbdf72b15-c308-2ae5-7947-c9532d8b3bd6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbdf72b15-c308-2ae5-7947-c9532d8b3bd6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>gPlijsnAZ25iWlLx2BBxu/4I6oY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WcS4NsrsGqzWAOiNTs6nj1xnvb5baPkByjtAcQCUcxEPPgyc/C6jXcX+nIHY0RFNDotjPk1u97f9TWcHFsrxMWQcBl1juBn4NJ0Zumu4a59TDhN+DfPY66uZ6U/1aQOCP7krttFKQvSzsiOPNqnOOasjpaAWrL5jJJJ0CD9bDOM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx06d6718f-5926-4cc8-f351-980a7854d31a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx06d6718f-5926-4cc8-f351-980a7854d31a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>GrSCrKCITyfY03v71rHUnc08zK8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BaJlClw37+lEmvP4mAXHG2KdDQQyv+LFyxi20PgdroU6ZzU131TtvArj6o79RUTTgq6Mi3mR1LqMrADX41rEf7Iia+APX8vf7t93Q/JAVMxpHte1C2t2EEyfbBM+50LCV/Q9C5RaXHDD8eFuKT+Nf2hUo5Iy1UShxtnlyURmmUw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>UnpaT21OcYO0oLM8zeMwLkIzVwkQglk55axaLRptGKUJwQlDu6H8yxAkCQgX//bo72/TG+V4gD//0EQqCO3msCZTDRMtLl9OKlQWGY76/YIHVVquPi+Hhw9g8vwzpYWPNRK9TBQAUsv+ZOanOXb4sjr+tZ3OpqeEDbCnmILBKQE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>SQvDUnUdW/auHl6hvklPcNIrYj8pjoaYy3SUonow8eQHBKa3xrb2zZJmaxBBafCW0cAgRpWsO3m2B/TdCBWpODxzX2DGRVfqcbLH15y7zfAAMIycu4SqinZEWueuph4vMiNx3UrdbG2aBLAQvF5EjO6x24o/TdmyJsHeGn0QQ5c=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9e55c52d-2ec6-eeff-a3a0-005cdf398dd7" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9e55c52d-2ec6-eeff-a3a0-005cdf398dd7"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>sbk/EG1s4AAeNPNIRnIClcgywds=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>te6vohTGbyglSgBWPdHdVTfmW52r8spfzBOEed++jF7y2X/UdMUX2cucYEcqJ/fObT6R/TzdWeERt/et9o5eR5S7AD87cY2YnkKXVzJF67UPlgi0wJ8ubMpIquPphOn/ZDChjrLZb5pNsZaN9sguOZs3FnL2uYduTWJ5+9ZtiyA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>UnpaT21OcYO0oLM8zeMwLkIzVwkQglk55axaLRptGKUJwQlDu6H8yxAkCQgX//bo72/TG+V4gD//0EQqCO3msCZTDRMtLl9OKlQWGY76/YIHVVquPi+Hhw9g8vwzpYWPNRK9TBQAUsv+ZOanOXb4sjr+tZ3OpqeEDbCnmILBKQE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf52248b2-47ea-7c38-06cb-f19875392610" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf52248b2-47ea-7c38-06cb-f19875392610"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>JlUH/wyqycHi6WM9jo7/MZ7Ga2I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YTU1SZ3akJ0sFPndLQ6JBzCUz2/Ef4zd4o8gyxCFFttcC55UNHolXgAVvdZYIqGKZ/sa9L+TRMOh18IAKlOFtPFdVqZBphYnS5NZnc1KpcTVYOl046dyPvE8FDUR8CEjggM/vGj6902/5YXgtIt2FR+cPMcUkMDgHVOjxIKl1k8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>SQvDUnUdW/auHl6hvklPcNIrYj8pjoaYy3SUonow8eQHBKa3xrb2zZJmaxBBafCW0cAgRpWsO3m2B/TdCBWpODxzX2DGRVfqcbLH15y7zfAAMIycu4SqinZEWueuph4vMiNx3UrdbG2aBLAQvF5EjO6x24o/TdmyJsHeGn0QQ5c=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>