Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx9f028aa0-f0f5-9b24-5549-ed505ea16a54" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9f028aa0-f0f5-9b24-5549-ed505ea16a54"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>GSBpSTP4zXZsjUHAQ+KrvMBeC7E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Z2DvMkcu8M4S3s0sqcJfjtK6qA9+Il+9K+NoUnUX5IDUBtJFOxLG6pJakWHxuBgFOIvFxLqr4X+Z1U1lrS3/dTOxXmQNSURwwHscMNwYifE3E+9Z7gPTBn1bl/coiKFQG7valgc8szCMrfHifVf8Ce68yjqusP802d9P9TY4RaM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5d9cff71-24d6-5428-ca44-ea56548a5b9d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5d9cff71-24d6-5428-ca44-ea56548a5b9d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>BMtdcF1xO8z5UxW7dO8vcEc14sk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>YkWUI2zvAhduPUncnRW1phUmEGYtLJjhHHD3Sda74DyLWp1GWYtVclYN56ZuPAK/mMws1s4pTIgXq68kYlVdC4V6T3imKoOa1N5CNoyc+huUm/li++5QunfVfQHSs9RsjgLZNaRs+ByM/hAhGgbMtGv2GXimxg6ZxCx7gH5jtkk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe13605e5-defc-e47e-f463-2fd56461870c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe13605e5-defc-e47e-f463-2fd56461870c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>jZdfCBt1nHafbOPDDSlLPxIbi4Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>MlbMW5vhmFSr1mTi0y13wLnEJhoQ0AhBGE0TZZ9r4Gq1iwPnOYR0y094jim0URGkyEbP/VA8L0nnrds2yhrdx6XVkIKvVA44denz7vg94XYflUx6MzieTxFOArlw7TRbVKOgklFst67v8tXjOEUMKzfN/IH64/jxedZkIUgJx44=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx98e48b87-9c39-eb1b-ac44-412343060904" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx98e48b87-9c39-eb1b-ac44-412343060904"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>CDdy04KYz7L2i2Np9K9Gv+3OSw8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>M+2N5YlAgNiTmEb8Pd3dYHE8O12kNXS4jMfu9Qfsl+31/PtfHQxskB/a7+hBNjAd8xBgPzeAVg6CqNLetMlEG+mA33zIbhSvlrrbG0v/lj4SZp5u4RjJEitdHHMoxg+aQfulgT7cDC0GMa0Xqtk2slnZJgKzNa6f9xfJcJ0RE6Y=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Asd1TrO9XuHXHxnUGh9zroj+5l2ZtmhRbEGroei6HsMsnq8t5Vu4c9uM8GMyN/8gl/Q4FK7E6T7nqm2erZOhEJKPdRvmPxKjxIk7WxfN1N5eDHoIzEG7AGXTx4WfmQgaMt21o+K/GT6I7eWqzG9EM+7hENSgcbHPpnQoPX9NfFw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>riyAfNjaxlcVPwCLxGgz9U/zU26QRDzyiUYImKqrZAU0/9WmeNqj//MX2kR//yfd0tuiTSQCV52O/UEDZlgaQmK7Inb58CyzHwA2d5liYzqvOAg+1SHUWJqvcpsizCgrVwMiViYywEpK6EJKrEv4gFBjau8VkWCZw7E2FJuwUbwznmmnpI8LWawlPO88bvi7HuXh4yVRBTn7sNmVIsOKQHwmBQoV3Smw7Cj7r4sNBO5VNiMTkHMyF4biDzZ/pH6r+QRbhgf4jMGDG6gouSY8vrA9frfTCVeuLrcSXflRBUjtHSL641X1uYnCyIqF6v2cLwhw2ifl083dgfSM+D2QAKpHNRUfNIl5+2iWa6O82H4r5A9/YRUWl4k1C9/+hcLJUffB1NZem2cGyE2IHrp8fwMxgLRU7XUY/Z6JNw900NbNNwaTFNNso/9c7J0tqmXSQ/o9nrny6+I1w32mZwnmHm+Bf96L4Pck6Tnva/QFE5HnCDZzE+FjYe7YaT5+Sgq6gdI4zuI+slfOrxSS2KMDgyG3SNrJBEimlk9UAYz6jGL8/6CgTKtPvnt62hcifzUXdk9qN/6UVheGIy5KswvVUgySd7aaKByAGHk51tf6a+l35JXVOxum4J1UKpukRZlk6luM2XDSHTgfv9bgu8zCcEk83XBRUQgBZi7DZzW4Q3aoib8+Yyxr9LBV0d9U3KRivwkSXby8mk+9SHW7ldNfF5TDxkIC4Fh0tuabRVVpX8C3kCEEphfNjAEMV8pMCTfosYWU3DVFG/aBhah3j4yRrjhZKKSKKL1IKJKuoshl8fkvpqAD8ORqW8s8+psx6rd3vMKiidmSFmtMDSiSBYKuNUka/cpWwbzkFSwsBBLmshGBHytGEHTyABhvtaugqHYllf8GIMmAa2cp8i1iIblLgL2mp+tFnzQ4TvM+UAfXsQq44Eh5Tyngp799ZY+Pr+m+ZHVuceOIyEVci4A2RaJgrVAEQ5hRZEXo8uCXMMy+FJbw5SQ9ZKql6y64omoXOcLFUy/xzlu8OYq5PZat+mhj18lzy2EanpVHeqyOOojm4ke3H1X421azadsucIVlo8MsgcjBa3jl9I7mjsjcwaVbJiwEFJCtXzhXJ1Sh7VMRS4lE95tmCAFTxN538nRvFwepFDHPZyXjGzGiQtgjUyoUhDCjo/VmKZxN3oKgyIThpH/J1PCnmvZtiHNNOFrsxj/o0vUvaZlZYGdQKa2IOIcnQmAn4pDbZSVVPkkmKP3yMgAXmp7Z+2BnX1iSN22Rb/IO8ozfI5gK5NyKhD8MV+gTY9igvan2LP3m1qt17imnCA/50q7t3a3IhWa3XaAL/rBtCYKiiOL0r5lENuQoREi73+UyXjH5B243QOG7qeqdL9h9vYLilgRhjG8L++wFAziPRqpiaK+jaho0qzKF5BUAFaG2Z2EeFlXb5FJE6CBTcZNyym6G7KlxZpmvSGRljwiyz5B+RZIHohPMlSzoTZ5hbC9GpTnODUGFSJO+RrINlVOSBXO1O/6X5d3VCN5qA3LAekSiRIshRH4R7UMPmqPUkGmShJSotaeZRB8O7u3EeNcY+YQ+JqltJHduDOKR99SV5Hk6G589NEGAi3DAemzUuGv7U35+KIlj3ksl7/O0zLFx9BI1Uixn1RuqZ6J6/fMlIT9m5X92U2909yZ7Wt6LpxwYnxaWK4cNJrnU/zS1xooH0dKrsINaivgv1/0h0nkghHNC3092jDArseCSoYN+JOux+c4IvGoWJqiOhpz4jJCQ0M4TroqZ3sssfQXKW6nv5VALZ7oYe7dxfB5v++GCfJxm7hRJrwF50N9OGpt8oS9mKJsOBhFgq9eGQ81o3Py13cNW43QOCxslzXZcmQ/2Sw6sF6CiYD1sdDHtRCxrhmsB7feHE6ipV3ES+SYEFYrec2vMv6I/TIZt4HuYsBBXDmdsIPx1Z3ybV3onV4j9PS1kDdjl2kJLyWx5r6n8fNQIYfddb3DQLpZdQc5c72hUTou1BeXYaj/Tbt7chV5n8iixcFEdXqRfQJsj7GsZS3VG8/IlZSaQ4OcAyowo1jXWeWtaTCitvOFYq2F2fnKEr+GzIP4k/+ht2rA11r7wg/TYyhZhGHJ089y9Uy+iGiKggAg3G+WBZjdrci2eY3P86IO/5tZk7M0p2yKZIJcwbm6HaYLX42m673DE6Vtz74EP9j1FtAGa+6t9QsAMax54F/dsHBcLu4CCBH+iefyHrgf6QNVPLat7Q8AQ3m92t8xp+pHH1aMpx//0ccuQYDno7QOyYA4YlLC20yJuB2B1X02AN5jUJUOvn7zj5lcUY0d0MChRMXhPOAhgzG9DOMtCiJ8dCLcq7R/WBvCKlA20NyIQrIyMYCmh+XSunaKHpRcZvlDDsj7j50p5Hg3zI8Q6LHFgMcQMtQPmP2WZSgLOj+HrPMNsoOoktcfdAeKXZ2Itp1vzkc6cKWCfMeXkSc1YgEBK4clMykgig4eEJenJr2dUMxPYUy9oynSacVCroUL/4ynXrVKjBkLO8Iu/RglvzwNykqfSBAXHNCODq+SAaAQganf7gSLr+q7JBTvl98QH6ZPLwmLa+zPVVl20MWFZ6HedmPI8KxnvgCxOxHqa6HcWjFqKwAp0aurr4QE4nd7tSP2TxkJQMs+Qcf1YR1nye9fXbezNoURSEO395Vk4SdbeQZd/7I6HC6br2g8p5Fo59WbTfaL6L3WqmjmFnqMxsZ7sDK8aoEEL4RW23ONe20ZMO6+3rQy33cpvw1UmmztZv5GVcJmoP86ld0ANlZIBmxM/9s+i7zBJuKyLObR2ObMRXiOPNJsnZoAqNfedi21TUjKSjKE4I0iJD+fqDG0oNLDSkdU19nRb31KXAsMziM+kyLmH1TrADdEDs5b7UXRGqTRvKnZiHDv4BgKhzaaDO0Y=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>OgnRwPdS81c96GB0fl7+FBxHfvv0Ysyw7f3a9w1rQUvI/fS5yLDtHxs9NEIc8XPdAvGZ33T26ssn/wosFIUnkgLk7wGBi76bxHBz+b1/rcj8ubqXio0SgAu9qWE+a42KEGuHMdUNYMi+OvxIvuCt+KWp1OdebrnesgBAokLrLhk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx12f334d9-70e8-a19c-1c38-456bc1cfb2ee" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx12f334d9-70e8-a19c-1c38-456bc1cfb2ee"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>7YwRsBkP5xcfabsAeVEdxyctUmk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WdFKGA9MuN/OUCR9Q9uNwNQG91+4rJc8Ag6GRflo+UQZwxdPxyNkTqs4g/iOCXm3ZLhG6MDC/IOxnlgm1xdV58kuOdDt+7uXbav5cua18yYdVkxf6gkze2RLcub+NVatsQwo/Wz2BT7ZLqTvX5bWzaOjumBub2rfXOKQjIG9jMU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Asd1TrO9XuHXHxnUGh9zroj+5l2ZtmhRbEGroei6HsMsnq8t5Vu4c9uM8GMyN/8gl/Q4FK7E6T7nqm2erZOhEJKPdRvmPxKjxIk7WxfN1N5eDHoIzEG7AGXTx4WfmQgaMt21o+K/GT6I7eWqzG9EM+7hENSgcbHPpnQoPX9NfFw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxaea864f8-f395-9986-71e2-8c498918cee1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxaea864f8-f395-9986-71e2-8c498918cee1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TJ8Eiy6BtdbGQV+SP84boC4A2/g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>IbaP6VV5PwAQRtdb5SWWqwZByRD6AaXzhn5DOgJBE9lZWUvroJu2PBEDawVTRYVCsoZA+gYOsOYS7tsrg0rViI+WBxj0NMMbrqlztRzGkercB8grzF5fIo+KJAvYCiD7FYB+hTx0020zR9IDkuEySgdOFI2QxJdhjtrCqq012jo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>OgnRwPdS81c96GB0fl7+FBxHfvv0Ysyw7f3a9w1rQUvI/fS5yLDtHxs9NEIc8XPdAvGZ33T26ssn/wosFIUnkgLk7wGBi76bxHBz+b1/rcj8ubqXio0SgAu9qWE+a42KEGuHMdUNYMi+OvxIvuCt+KWp1OdebrnesgBAokLrLhk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>