Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx7f081aa7-f337-5aee-0891-40fcdfd6e0e2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7f081aa7-f337-5aee-0891-40fcdfd6e0e2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>t81O8gDNsGAZWw9OfB19vl/ZIf8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JnnQRU4yr/AYCv7iR2yob2X5U+3Gy0Mby+G2GpYobDprbIjipYpN7fYZ4fBJo1/SVTxG4dMLQxzCBblqxSk3Qz/37up+KJ1Qe+wlp60hhlveGJvzWbKnE9F9kHsVZJ2Ygr09mFlQURUKXX4tyU3HLgjSmmQyBfCYWVw+uK++Kq4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx68ea71bf-7e00-82dd-25a5-c82c4c0a98e5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx68ea71bf-7e00-82dd-25a5-c82c4c0a98e5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>jenbuwdBR6sVZyuKiR71kGNkkKI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JC8WDkfIwxQtuxVn6nnhEcpDBOxVUWk1HjQV0hmroeDQQ3mFCNeP7MiVUjSEM35d3RXcKU1o/e67TLo0dBFyoSBqko8DmyU32/4XCJghI8blsU9XZ/vI6EcJwBzbgzPVZo7Uk3E/DNWNfjhZ4gRRGFL5mrb+aK4o0gyw+J7Q7/0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3620fe65-ca56-7338-3ceb-49b3addfac2f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3620fe65-ca56-7338-3ceb-49b3addfac2f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>WHfC/ejnuWm6dkh0vnKXFkGb+5E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>PiIqu6PnVyOGKZq9bC720GdKPooLYYxVVdfGRbufmtOCmYFB5O2MZd5NB7J8TJi3edt5npbfQztFlU2M2TFuheY72EptPw4Ax+EbebMV2HVUx9dXmAhzG6+V/m4l7CtQwN2bsEIWyAlmUAQrpJA7Q1fhqC036mljg1iWMFqtkEk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx46b363ed-5717-7429-7c59-3895bf9fa6c4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx46b363ed-5717-7429-7c59-3895bf9fa6c4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>7yuvURcsZiZ8sbEpUMvkYUdeGYs=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>VLtH0cwxvf8tdFTYfOcqAGXZVhuw8SJJQb2HHBxMCzqycmt43+BYAM/qalP67l5EIx3EwiiELq/sz844ENH4D/Xg7bicarfzfaJQiw3YbiEVv5K0zibWouDE0Kpxs7CBXW8BdLveAe0lusfk4H3ksKpCRt/DSxLHRMADvpgN2WE=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dRG430nSUt1biXr9kuJMQlxbnajbYwIyvwijOm439aGo5NxsBwJSFp8zKtvqRAUdwKmK7ZGes9RYd30ljGBO9wpjBw3icmjc2Oo2vsM7abgSpxxWXuYHPiLqUEK/WErNd3fUAs4g9YGA9DuaMJL4CZT5mgs87BldNLx/TZfPJtc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>NTC9p4pjFB7CFOygBTg7TTUjvgTi/4OCSgyHPclYPs5O49hDUx8IpWKcZsxEvax6q2ovWP3unvokrmVoEw8hBQQ7S6pvvUyELn6AAzMmcZUv3xrVpbZ5dzoniLYn5K2FEG6G7fd9AI7n8FNRkvGbYgqWjPsEi93qC4agPt7d7GE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb38cf3d1-51c0-177c-86cc-345a54ea37c1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb38cf3d1-51c0-177c-86cc-345a54ea37c1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ITljPZ+hY2wsaCKo3xMLrcb3NRc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>vdR40oZ0TfGp1mqwZZEP1uSkIMeroK6gvxZkJ4aeiainFJqfaSWUIk4tJTg7GltB1oH49q0TKTaAxi0uqAJDea6VjhPtk6OSX9v1Gy1lpTDOPlWHuZFTMNAT+aFmb/118XBgMSw3zMYoCJGZombIe7ZaM9kkxDzOk3IxMVc4h3I=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>dRG430nSUt1biXr9kuJMQlxbnajbYwIyvwijOm439aGo5NxsBwJSFp8zKtvqRAUdwKmK7ZGes9RYd30ljGBO9wpjBw3icmjc2Oo2vsM7abgSpxxWXuYHPiLqUEK/WErNd3fUAs4g9YGA9DuaMJL4CZT5mgs87BldNLx/TZfPJtc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf1f1180e-95bb-1f94-f0e0-cac9191fb00d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf1f1180e-95bb-1f94-f0e0-cac9191fb00d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>rOOyECoVFU2kpKfK5NF6Y4rsCzY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>nJCiqUra+DWGy6KX0lHu93TSy9aglHeLtB4bFZlJ4eYGoSoOoSp+2WrY3CfFFUK6kkg6ip+PkP3pXZjVgIg920haXHHgVPkBEXQurgDQT72CDCSn+bkw7n/XQ+C6YXNuUb2DCphrOQfZN6nbmfs10KpHzsSFd98lfGHN/zeP5DY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>NTC9p4pjFB7CFOygBTg7TTUjvgTi/4OCSgyHPclYPs5O49hDUx8IpWKcZsxEvax6q2ovWP3unvokrmVoEw8hBQQ7S6pvvUyELn6AAzMmcZUv3xrVpbZ5dzoniLYn5K2FEG6G7fd9AI7n8FNRkvGbYgqWjPsEi93qC4agPt7d7GE=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>