Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx253bc461-8f79-9c68-9a8c-5d15f5139521" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx253bc461-8f79-9c68-9a8c-5d15f5139521"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>/2OBXzxeZWFUHXSmHS1S5bopbNo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>jHPefKAEcK2bHa4XiLEIgS99wp57BjV50cbGTex8BkwNTnNV3lANokv15R3s+7d63cNnwxE4w7/MNSFvhmUA/F253+rgQQalKd1Hm8rFjaCsHfQX2baBorp2WqYyf4M1zRmzxPSrMhQFJLx1k/XkquyxnnNguUwvf/3pOVO9f0s=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3c5cfb83-8f23-9661-41de-b11d5357f05a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3c5cfb83-8f23-9661-41de-b11d5357f05a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0GAMcxFjWvNLsIoclN1fFoCDyZg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CzHYSoKDjLD9IfaGKY68vsBGU4cBKVKqRGV2aqc+pvicfGLgBIt8GISYbqcX0k5UNXQfsp886NXcs4ZR11j6AppXRQsN19avaYvE4nc42XvCnPDtb5AsiyNV2fiz3b9/WjvE69SrgN1u7fNZyhND7x4XqXaTbq+EUz1mkJt/YPU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb6499182-9a4c-9512-9e39-d1e0abfb0ff4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb6499182-9a4c-9512-9e39-d1e0abfb0ff4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>m97fVoOGiLNMeuv9BSyOi6fKqro=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>T7VB1Eaea/dtUtNULPTpu4WnMYG1zEHxRA/saDsEHmfGkKmbEaFEKa3GVMgUion4ZWOm4EzIrqOvB0eKpBozxusIDhzeCOMCb3JeefO9mwHMVcym/rfpdPh22BI97OW3oJw2enfQckcUTCFJLv65ME8b/vmxR0bo7Uyi+0iiUwQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx5e2e5ce5-a9d1-0c3f-da01-47a87efbf7ad" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5e2e5ce5-a9d1-0c3f-da01-47a87efbf7ad"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>OQWYx661xndKjAukaVw09tycHsI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>h+GEUsy68HQa8GBdpIlhUTWzu+JclvodXNQR0+e/4am7nFF46VtehiC99oD5x9Y20gWIy4Qeks+X6AxvK772jouhShYij/i3r0Yb0tjg8uHKU6QBrgAkBoALwxakELkCkEEZSwiCWMjiAitCh76Rkf/GQi/xEXU3eZBAMd2NGHw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Zn+xVi/RN5whU5JkhLDDtwBHz9nvL/OZUDBy4cSBmnWR5GK20PyfbkvadrBnCEne99BPrrQ9WQkw57IIqB2z9WNmVEDGmF59jWvJqpvPQA0RGwXwcNZ08/UKicYbcC++QMha6rF3vVEsrqtWYzymB4mKrz0CcliqtWxfsFYrld0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>uBlbuVOv7ndOfZAC3qn2dosgV5IcIcSGlMpm1xCv2R6tzHb3WXZEb2bxMhSP1Rzv8VlKmZZD6NR0DbBRbKjSe7Xq8EUlyXZlfyyZry5OQ4k6HPJEE7zER0AXhyjRbpfu5xyhhMJjYWYkZHMv1QbRYTJEOIOJBtpSzGdlol2UOjM=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>4d7G3hWCQ/3ASQmicHAhuLkeEKcNzsW2jjS9pcn8bL+heBtjRdaIvpN+hukoOVREYGWTlprqCjhoEhdayp/exzzDYhjzq8sQ0QOpWTAXymSUcX55KfhMaGI5f/FwYbc3IDhKsV/MDIECe2WfMSTktCvate9DTtQSwVBoX1QSlHVi9VmDYtSogkm3mw/+XNliv/5V0gxsivSFalygcdsjV5wre38BqYBi0arkYgQ5ohsv3mAjlD2qElieFWrJaplC5STmWHdqkRmT+YI8ks6qwVDGkmGr/3By1WPGtxvAfxIelTAzSj2DMvrufINGqtV5ipe0g9tGyz+AOW94aaeJYJnrSZSNrEqHjxJVlmPTMIun9Vt8JBEOQlylTsBP7WJT26jJPTNlbclg6lqOKiUMwqRD7t82rn6t2cs7E8hExIot9nNTx0wwpgG9zEKFL1fLh/9qzXnzyTuHvC40+L24YdBIx8+fSq4Ak0ojfRSl6iWmOyxtSdDY1rZAU264MQkB62srqlTjPM8fxOFkmMQl+UOpsqd2q5rfUtsiHZQJ5Z9mgH5px1ArZQ9/W0KCnGOwErIdZz7zMcnfaWuZVZM0WYuLfHi9U+7ekoy/qnnVqG1gmCerMkX5DSnVCw2dUPoPCQncZj8QfsyrA/YonsuefcT2MvQDDqxVtobyO0bczYYACYFDUolsEVpTWJIa9ynd96kF/SzVvvgV7ujR/mpM7VWrDkMFfmu0QmV1ggDxulHGLEKhPVu5r70tc5ipBqmLXivbFcWLqMnCE21EQQ20oD4mhc6QaD/WTwT9ww6xqtZem7szozskdXAnsCW+dUMx41MFcZzLXJkxTPBYnMjO8SbT5+fVMClbFGZXC7Ko5O+F6sEIOWTKeK6/8P8cnAHedmyA+QyeoljTlYto+ayRTsPLhKqmCzNpmIcVHrS9Qb4kQEEafzQnaaYdNm1yUvbI4s8Zu8Z4Ul2VXTxWCJ/ILYK/Bpx7kr299N+xelvPS7qnJXJ3wSlKYQWJNkOXwy5bWVkCHGVeEEq4soD9ffa0+26irWQVjtdy407qCHxcJgZ3J1E9HCwSudaWQxZ2enRBpb4cp46fwSzY3lNV20QvGojB6O8Dy5Zcb4RZMkzcslSYElv7ny0wHjzwilxaWwwiEwpBYdA4F4MnVIRjLdL30ogjS2F1H4T/nwL5pcc/KWF02FbOU1JIIA3MlxBvmbrG9xDEZYByjQOdJxUJfU0JgOH7n3ngwq0yjtJtQfl/ISXmwiqCi5tiUts6uyvrGJG7uuqImr6pZisVw/6IcLECTIcR8DI6+VTy54Qabib80dNjXsEzo4G8fbf3Yp/RJ3ZEaG5SdzBkF5qzOfs9UPl2J6beD5QKGoFSddkb0Mv4IMCBYB5/4b6HecF+YjRKoage71DUb4Iwrjkyl4BQL3TXea4ThC4wfqW6kS/GuZJURCLXig5J+TaDpIrt4wxB5Kf+AFBQ8b+JjZnm3nLvQNHZU+9QmSbf7s9wlBvsiQ1tzkuHeNi8Dt87+c2l0ww0klLqvpOsgTR/qZCBMw37EinqZOrP1JoIQ3aGvbcjdf++V3qT2vrIW/I47NBURrnBVaRGlb5++MR8S4Kd/KzmVNEQgam0O9yjXzBCBfDSEz9K567VXS10MDz/N8Uqkur9KSAqDSuQusGBx56z9kxvKJ9NQa5wKWjIXUQUugXH1W2JUVOmX6kaFK+NTuFaTLmsEZ/aGAjGmvlJm1ccVdcRcagm1PQPTdZahRlgZ+0o/cvxBoiC825B9lgG6vmgENtbMpFgbfMSIBFTEHkt1xxMcjkKZ4cgdXUeM22C0NyNgB3yl8aIAJMKtMc1cq1/6iegWsopmI+3vYsZ/dqgLmeTCIFtqt+TYJ4OkTDV0z5yIeXR7HMb/jO0IGHUCbOBagRZuDY4OZoXfvhV5nMzsMk6yL3jqP3vrbP+7NNOlY5S3ZmjNm7iJIBjLttH0OXCqoUsfg5gsUD9IV9onpg84NoCmgp2aVSrIbGCH/6ZT08eQxmr6NMHTt7AoFBDFeEA5Q79oRBB+PZ+y74M8prqmiAuDFhAq/S5oi5okgpH8ez0JYlpGdYqj3u0Rg0wSF6jzwVqP3bsiwe2EHBTjembeMOUVwew0cJdsW2LYO/5jFW3woH3csyURlASGCwouIrvk9vJk/t0PFwEEpB7evkEQfT6/8iDeeaJ3/noukJ2Skop73ecJAq+r00LBe4B3Hs0bBNmItDexZwyE503vwJGddjUJ92rdCnBkLloP/aQzj9/J2/vow8WKSvAXEOrbiTzZk1lddsPxDpwNFLowfMu86qLbOM4qn8gt1yv8Dg9vG5Z+BkOdM6NGu+vhSWZ4DONrPUdatkE9nf7I97YwlFdeXjbio7Rs5zFQdWR4jFYaE4A6P0yKb26kNKT0HXhllq258B/3/okUi+/iW94KJyp53601LX2mpFcV+GkDlDJBeTXk4KTHnClTs8/1CArgNy4Qz+ubeW9AzdwuQJscpCguv+r7U/e8Bp0l7nR+oL+eUF+4OFwaWkxUdXAOQkjhRTcC7lHqGBeNmty1uQLsi1ypv92aO13xokJgxuIRHxo3crKLP370ScQkhVc93Sv1OKkeqdN2Htuf9j49KKX0l71tob91fH71DfMt+iXajfISOYoCS4vWeaAuqBgGsh6FC4oDHEp52O+uovHcjxkJuYPeJ0+ZXTzAdZds7XWOS9LjY701x/jFC9eATFl9gP0FtigYfLKt9UZAF3q4l/UMQxi4HklqL3pxlRo3whp1ij3YCQDW6KtGeXqMiW+LuG7RbA3y/PiNZ4A03nHT+Pm4E9ZWBUSiysSK0S2V3qgKl4gsjB+ealie4+y6mO8uaiXLGzQ77IupFUDDQYjg6PsWMUEjXz9wDPh2hXeuykc9yXZy9Drp/yvrnZPxbD+220BBVhS2l5owymeXJvMu5xkTRpBIrg6q63+jo0/d/Fog5dZIfOwB58MTfOpKB9dtoaLA0IIKwfg3qT+Zw7OxdKfIZn6FkgudiJMf1fP3ZyXGCnBBYMmY1OKWJLtVKqaXQtfmhKpJ0Opw/gWgEn/wdLMsV9miXTbUeuaA5BhnxzlgJSU3tqucK2TOD1lWk54PYn8XuiuyhzEFcDN7Eq/K9NieTbZFjGKCCGevEfvRUE6b1VK8ZxYFM5TJQijwO1NjVIN9SgK5GAp2Swd/X/3oVRLegTwk0ZwuIkWlxqv1GDYALJiBuT2boHlQG79KDgD9cMlzlFH1jl7bBa8MM5jZfUID2q2wBxCX0R93W0qEQuUNg2My+WNurTGdrA/H/NYECXM5XEWj3GDwhPpDTDmTYkCe3OdjMkT0NTtQiO51hKfphKnQkxdlPuhlUIyDf5VVYWI7E1VVVZUcwiHDU0mn+QMxPz5an2ls8lg77BZdotSQEiZxRKLezVbWFKdxIos+gFQ2munLLJWg0r8c2jWNM+XNuyumbWlQyTU+7EV+qZ15Px78wcvrqyHHTPcZnOYUvzhwH5NpxqY5Yy4AiUHIP/u3gg2w3TdbN5nF6w4VpIMn2t4yW2cYOrhetmAw8ZrMNuVIT+Hl0AmCYz3JwbVwjmu8enXmvlPLoO9RLMdWF+QVzchGE4o7Km/FUOtF7jidqEBAby6COHYhgoXlYSU92uI4vnlh8tHKt7y9Eb0Zd2h04ATDaNx19bBXRyD17OT4odoKqnTfrsQbCwwY6xqOHJwt2PYlF67oyk6Nc3pbfDThvHmXHmMT+jApWU2c+c/henh31oTemSTvzE2Ksjoc41ERYUr2Mc1cPJxdu5CPwtUNe08HjBW1plxKksYkD+Q15kaF+/KJmXhlyq2tZzRBzMumQPzZ+QsdN1bfjDjMZbyaWvjiTrcspKCJm4rNQw8Qb32xa8hbA45oU/cCr5GYCmmXuAic6ifaSaymXyCYfdz3JyNJQE07I4tyJhLn7YKsMvoeJAam88AT8ucOTKiveKjJcatjlq/ZdDuJI6OiD8SDpPVYwAl4/m+2UOIQcZmlRWMKpnmTsbx7npb2JUFIJ+x2KseFvwN3icxBPhNgiQigE0qbYusaCgp3n78msYwbXq6GglAKkvvhygsgrcq/5rc7NlQPv7HHlayMzUA0n7952WqulcZbFcMhr/Pc7+uZpoL2Yfk6DrOpMuCsY8tbwgMQz/LCIDj3Mx2RIsGo06ZVE8SUNZdOJ7YjcmjQoSkmjF3iuqlS6/7FNvl+291HP0mPc7qqJUKH/hR6V9TCwzIfdVr/Bd/dkoGJF90M7R5yTyeSZDPPVY6WKpDN9vyNeLICBNBs2QwRlAsxVEnfQd8zn6N41+CONF3j2fmcqoyqg5UQksCksb6+RTZ51GhMF3Uzx3G6+y2O2GqEnnwGKqRzfiD02N9HGr4aAVYUHLFVsYrR4m3kgL4YFLpZr+D+VxH6J4KOP2moaqy2u4jToEFnAW/EysUxq80IWqjfXu1S3/pGrcxUPp55BR5X4PwFvP1M2C5WN4+3iWVDjHF0QE+3Kj+u7lGtDLh7i0poOyrPmOc99QnC+h26KM6fZXeZIXJMdBRKlI53w6aiNlaWjGWj0ejs24SQfdMk8yuAp46OT1jcbwu/VjSffGh6N0ZlDBJbIjMrklwczytXY0q2CBDr2NXhxRdIubA8aIf+kfnVbxdMUD6cjHVmTGyvcHVN41dItxsYlcLrZvPv8rFMHsbOAm8C6HxD4rX36vrKqcAFUpnHnSA4flci6wv8v8r/Mz6zRcv7Xw+kp/2zhrHjz9izuXDU6OmXVKLLdcB6FYelFIyXIlNyWt83ALqapdNhg2GfwqN23dKKAmVBUQPKi6RIzipYnjpM5ghONdm9CdRe6wp7Lk/qTzem6/4e1UTrC6WerJOsS7OYJ43vBi0IxGiArzywtvjLjpWzkqQbT+eBHMt+SP0g6OOYJslfpzzJTMyyLLQxvb3TRvBUe8v5jgLGSEuQBgr/ZDaLQRz5wn6ZKxpURmGqU7+Cn7wlgWFttTj5j5FBeD9lq/Cus/elZoeYPZUZAiPDMO9q/AFFK2v9Saj2+H7bTsb07h51lurraGfRAIlDaez9/yiHfQwfgZeaw3AVQU4I24TPKGet2UvNz2gYoxZHQYZB/zCrJFxMbVfTRbEFkIe/IVs+I+D+HQisQAqNBwC27yotfFGOpRt/18JijFdVBPqhMbkYNJ4UIt/VoD76fPDKL672N1+zut9iXNX23vav7v97cXzw9oWUdcmdjjW0O+bFy8PcAkh1bqFnp6J4dB/NvlMKEnCu0a2L+Qju/FI0dNZ/1C7SqYQQ2E6zqdPoJvOylBDw82MfdDk/xhESJVAIuZ8Bjt8XXivktf4Gwz3GvDNSqFI9rYjeVR5lihZviuR9lGlCmRwy8qjjR5j6HhGU/CuvmV97NkgjdZQedzC479aG8dIEsSxoiS09GZKmBRvxoAVT0kqfVIGtgZyJ8pdN3qmOkv5wWUv2XvSwVWHNDNhcKY=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx52bf1026-052a-9b3a-8359-9903fbe4f304" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx52bf1026-052a-9b3a-8359-9903fbe4f304"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>zYR4buvtqAlPnbyQI8uCCNhcSoI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>T4Pn574eKVmJjgL5hEC4piIgjpCkMDa9X0DOwgTuxgL8gbyceoh5knYRB7RBJ+3ljuqXkMu1doLkYclB9et6tb1fktAXDTvsl+egAAiLi8xXhsaLW8v4Zh0dOhMhKMRwpgAKuTwpOaNdhrLX0Lwc4pFZ8dIl0d45ITUeK6Yc09o=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Zn+xVi/RN5whU5JkhLDDtwBHz9nvL/OZUDBy4cSBmnWR5GK20PyfbkvadrBnCEne99BPrrQ9WQkw57IIqB2z9WNmVEDGmF59jWvJqpvPQA0RGwXwcNZ08/UKicYbcC++QMha6rF3vVEsrqtWYzymB4mKrz0CcliqtWxfsFYrld0=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx7d1b30a5-f66a-6da0-ab42-356ee98ed90a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx7d1b30a5-f66a-6da0-ab42-356ee98ed90a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Mwrq00SmDjaUTCVjLFveEB3RWGY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>m0Ubu8ks7cOpnwlxXJE9T1g88+h+1OInEwfStE1dYcwL/pO8xs+nSt38vO6lLO4iA0segZsBmUwmWB1brFEphV21vGn3ThGP65GdK2cLzOm77Zy4jFjuIbQvvSFPEUrxFcBIKfyDLckTfiRI+L7084vmeFF8xEyHNZotltFwfxk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>uBlbuVOv7ndOfZAC3qn2dosgV5IcIcSGlMpm1xCv2R6tzHb3WXZEb2bxMhSP1Rzv8VlKmZZD6NR0DbBRbKjSe7Xq8EUlyXZlfyyZry5OQ4k6HPJEE7zER0AXhyjRbpfu5xyhhMJjYWYkZHMv1QbRYTJEOIOJBtpSzGdlol2UOjM=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>