Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx2d4727a4-019d-b5e0-51fa-51ba19c93dc8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2d4727a4-019d-b5e0-51fa-51ba19c93dc8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Sg0mjk+04JRjmMU8Ctw5Z8dnuVY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>vejpTwSV+mfYkCKmbWhRET8JoBwAz4VE3MNMsY3L6cslP3zWB56dgDIG4Uv89r+VoRt8iq323TnALOUj0nmOkjmnFzYFmp7+17pd3gpOS9WnhXpwTv7wswqFVxJRkUEUvJh07CAjmPmK2QDVH6qzhLMBNHqzhXQN3SDcnX72RIY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxc98d9eba-150c-63ca-17ef-a029f74c3af9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxc98d9eba-150c-63ca-17ef-a029f74c3af9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>hHi72CGvgy+NdZFTfody4z35mbM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Q3O+hpHtiE68eayIblrvW8BXDnhMd3XfO8bTnvew84WNqYB0pU+YnL5thWcos+p22nfIsZNhipPwFwWCpONFn+iTHkBiUrsrt2ay4iFJ+O5cddygeB4PRXCj3df9JiAutFInklMsIJKL2dVPuGV004qtcK1ZW39ZpTBLZwvEqqg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxeea82f06-f40f-b17f-7411-f98df3c763b8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxeea82f06-f40f-b17f-7411-f98df3c763b8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>tsX4r/FIs0QnGoPeptVFHVUFbbM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WZgU2wv8kPippaPwR32wMqLUoLGmQoGC4SQdbXqmsnRSYQu71y2mo/U7mc0PPdhRwoQmiGheqAx2weEl72vzK1YeD46XSL3McK9b1GkSfGFqTuB+E+7BHYH7qbbjjRRxJOqCdSzmTT/DGxq4nkPP68Sc4XhMfTkfnSm0SO5p6xo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx4cb07c58-ce19-7384-e655-cf663d6d91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4cb07c58-ce19-7384-e655-cf663d6d91e6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>pY6LC3RI+M6/43ligczXR5v1m7s=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>nyhhgvViCDAwRGQ7xVez2npYec+T55QSz3li5j5k4PKFfXhn2mL5bgZYss+5tYjAlq8aqL1WhXiAv599Qj10USv34GMJhNIw0HypDuX2BGv3g59eAqKQiZPWqVj+3dKGKlgSK7gRLu18oA0q/QPoOUfSM5lDoobUREUeyh2Wenc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>TqSKIyFpi0jN93VGYm56NxBXwQbajrCRLJmy0oqN4Uf7zRH2xg63cHYqOSS7HBpgcXrlXUa6m7Kz2l/lWSFbAYTN4hMzVX0L6iYrVPWbhvm1CEVhSiY0paYucy7s3BODPPq0PkR4jhiMb8Nb1FyJwQJKkFvQD5cUM70iPiff/0k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>DcEz+4g5bMQVMVKWC/XJ69vi1ewuxc1EYlfMc05lEfBZXgXsGQbFSa/fIYe1+g/lgYiJopvaXkU5Ormx2cKySo6pILt03TH4ttT7/YLP45JLIVU3IQcgeKZX7IkXIbTGZR6qln0ZX/hefIo5z8Okeofv1+RR0ZWWbcvLDGEdQLo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf9ea8aa7-7029-8670-fbe1-3697ee9e15ac" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf9ea8aa7-7029-8670-fbe1-3697ee9e15ac"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Hu6A33+7eQKczl5zDH5lTL4SRQY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>p90NRAwmo0zG34BfOOf5eL4bI/3ennN286shfVGBcydj6K5R5b7fXTYAsSu4FKVO9MFwv1tRezxrWBkFO9haU31B65uz+aLbsol+WKgDn56e0PAkXAkcm5isKU52Lf1ltVS7VzAXVzqHvmNFTRo5gSPefJuP/l40KOjZjDfrZcc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>TqSKIyFpi0jN93VGYm56NxBXwQbajrCRLJmy0oqN4Uf7zRH2xg63cHYqOSS7HBpgcXrlXUa6m7Kz2l/lWSFbAYTN4hMzVX0L6iYrVPWbhvm1CEVhSiY0paYucy7s3BODPPq0PkR4jhiMb8Nb1FyJwQJKkFvQD5cUM70iPiff/0k=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe3c8f194-7b72-dc90-c5a8-2e5af8ee4ee9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe3c8f194-7b72-dc90-c5a8-2e5af8ee4ee9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>kvSTWH7Sy+YuAXxFZlEaOOXFTf4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>xnpGneZ1nIWxqce/33zdcHe6yWgYxHuATOwdwMa9wK87CyVPueHExdL1j6f91GvRwnIMsZ6gu2Js0WOEdWKJbbd+/VR1BnRlkky9mkQTO09oCVxwopvSUWDBtYEuY6qXFPwegZKxh3KgE0ZgmnYFOOwAJO4QJwBrRBAY4aukg8k=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>DcEz+4g5bMQVMVKWC/XJ69vi1ewuxc1EYlfMc05lEfBZXgXsGQbFSa/fIYe1+g/lgYiJopvaXkU5Ormx2cKySo6pILt03TH4ttT7/YLP45JLIVU3IQcgeKZX7IkXIbTGZR6qln0ZX/hefIo5z8Okeofv1+RR0ZWWbcvLDGEdQLo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>