Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx8d7ded1c-7902-9c9b-1495-cd059102feda" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8d7ded1c-7902-9c9b-1495-cd059102feda"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>PZnfT2Tch5ENTuZMC2tf1JUXGEk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WiMfzM2j+5GFrRCPcYJq5Y3cjo4IDDPk/IESABsV59OlF78ljplEUp4DsEXQCfWLPnZyEE53krP/g7yKvhL7GG1yyLvdugOUyz6eQphlrdUTKA5jYXa13NCe5Zj2qrAf54owDATgk0AHs8Bl/MLsVT2dnucbJ5FNFEMr9Aq+VqU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx77c18cc4-1e4e-3667-84e6-39978011cbe0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx77c18cc4-1e4e-3667-84e6-39978011cbe0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>wuvY3ZBgpTf3sFeOYmj31fdtNLg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>wzegU6VUkndBbhQ7X4m85nlu8pftRRS6jMh96+/67ADYsfB94YKdvY9U00oVZFWEjXOE1KeVrr0pejaGcnADXpYYDJE3s+WP2BqTcpVk29O3lQI9jA8z7Iw1qkZq9B931Wu7iNyQcwiI1iMk2uKomI8ZvNltYmlCRph42sE2XUY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4747b075-8519-5c00-37f1-abfa4f67ed2f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4747b075-8519-5c00-37f1-abfa4f67ed2f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>8ggIni/aPacOnDcLAIV0UxnT+0g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>j0viYaqyUsCHLFW6u2Q5kkr9Roc0OelcXSyNvhEwMSIKcRIRdNEs0I6EvrXZsBuuIpI1W7eGW8VD7VCwPOJ31xf5/5t2pncMNMxbb+UReDlx4eTNUYIw8y+gSCxNBRqzGB4D16GgOGKeHpIfuvpPYtbAo5EFihewnECippxFOI0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx6fa8f995-234e-c203-649d-bba9d3a5c71b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx6fa8f995-234e-c203-649d-bba9d3a5c71b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>VUcCaa5l4OuXlxY8HM4JYlLh8uU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ksumigF4z0KUXDmQ21Wr4C/+bwPQIy3zVg6hwoKufccu73ysl1LOJtPEznYvg61ARK1U6IVQPv+N7O96A/rJKQ5Ik+IZUIio1fCWRlAlBtX03TEcuxIf0d/DGMMcGS1vF9UD4F0hymFWiGRGGPyuI4pZkHzdPW/N/qNO/MudTGA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>1SakIpEK+7V1Or0veMaNbcXYx6xQUhzBonbb4B07cQZYP0bwJgpLIC6tihylfel1RHboVLDNi1m/iZE+JKFUccwhRG/e4M9WPQZXkwm0cUw3En/8ZGNiEB9SjVkJ3TE0LKGvv8/X3L9wegNeKwYhmA6roOJTW1TL4k6HZPlejyc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>BtlE160pNWWRGjF/MZDyM9r9Aq5Cyh1RMFHwzeWCttJz7DKkBW3sgaj2/LyPGmO1e8WpufKbc8cBvYqwLcEZHpPWPtv5p5EZcie6YgelW2iaX+3ak9/Fu1L1UG3xLTSJrPC0FFbHRIX983Ubp3Lqr0mJ/DRtGKkvMd3wUMj8Ens=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf42a7483-e60e-ef8f-e011-e8a5eab82d8b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf42a7483-e60e-ef8f-e011-e8a5eab82d8b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>tWkCND8P7/JT/ThpmAxK2Jzv5Dw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ydP/3j/OE60F1l7hJwkj3JBPVXSMsFgZF3tq1D/E2hz3MFRz1qGxFPpHdWvZkcVcUCdkpUdHcp/XB5TSaVoer2ddwh7Gdnkz2OezL0z8CvO2JO5rG8evyAAHIJTwiZ+rjaxOufbtUKjjblPVEMgukhIsbP9IpLN9OeZD3t7ArIs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>1SakIpEK+7V1Or0veMaNbcXYx6xQUhzBonbb4B07cQZYP0bwJgpLIC6tihylfel1RHboVLDNi1m/iZE+JKFUccwhRG/e4M9WPQZXkwm0cUw3En/8ZGNiEB9SjVkJ3TE0LKGvv8/X3L9wegNeKwYhmA6roOJTW1TL4k6HZPlejyc=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbf4be2dc-e7ea-b26c-8111-2aaacc11d991" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbf4be2dc-e7ea-b26c-8111-2aaacc11d991"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>HPpuzsgTJqSmFo4nnMxh8ijPENc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>V1vYz8u32jFPpvjDTZZrJga+aJtDHTkDdvg2APQ6cJbtJkG63WO5TaqPmDU+W9Mk28wIGpU6fbE9K+lIu/8NcoWuL2IzpgWx3buKRO+i2MLyUa2wja8kg3BRB7ku3ovl5H6zlw6V+EfBkHd/UXGMv4vXB1U1L4R7PQ87VpXXxjg=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>BtlE160pNWWRGjF/MZDyM9r9Aq5Cyh1RMFHwzeWCttJz7DKkBW3sgaj2/LyPGmO1e8WpufKbc8cBvYqwLcEZHpPWPtv5p5EZcie6YgelW2iaX+3ak9/Fu1L1UG3xLTSJrPC0FFbHRIX983Ubp3Lqr0mJ/DRtGKkvMd3wUMj8Ens=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>