Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxdfce1481-b43f-fb90-f31b-0c10371ccda6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdfce1481-b43f-fb90-f31b-0c10371ccda6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>5mbaWBcvT8kawvxHsFSHY27Xg28=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>xi59oKLNNUFytBpi9WV2e3TkJYRXA/vXFOmP+3v0OFWKA6gU1+mh5kXAQlLLxsyqPwd6GuGqv/6d4t6RLr4LZg/K7EH5pqwGd4l7CSFwJ+8BApXnaYsYVaT3LTR4K7eyhEznv9U80g1PqMbYPzhdqbtEDaAQ6RPdHPYsR5vbmnI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx2a6a93ad-00f4-27cb-2a64-8e7d6ae49125" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx2a6a93ad-00f4-27cb-2a64-8e7d6ae49125"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>vNjM8U2epc7VfXlVnfPM9Qh8r6Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rZbu++0CZZcrwRPqDLaMlUWbgG+xy8sBbwoLESKgDp8HTjGL9toYQNKiTjQWU0pdrB9HqK5U7dtEDAv+hUqF+2OAjtLNzDiDTib8/aq60T72xKmxCrBOH/ypTqW5YTN7F+cWpny8eL/+qzAd4bm50/gv4lc5FAWVCg9pbub6u3w=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxafba0df6-3dfa-6449-1bba-d15d3e1f79b5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxafba0df6-3dfa-6449-1bba-d15d3e1f79b5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>DrpsmDTjLjsVs9f+M68QbrsrD/M=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ZLsShzlrua/vYQk1rV2cvKOlHUdPdfLdhzCQdZVN2oHg62y2DrkyNVe/rNaIzdS9nD3XWNZrUQea1MWqHjBQV9VgvAS74jqAxkP2jpvGLjTW0gk6JwYuDQlHzhutD3dnUA5Kq1FTPMdolyeqmHvFqhZGbFTSdlaZT3C67JIZESQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx3d4fcad9-2d45-1485-ad79-5740e8ccd99c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3d4fcad9-2d45-1485-ad79-5740e8ccd99c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qXN1vjYRFxQxqt8rAWKVlhWOq6A=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>apbbUGsHd8pRBbyxILnUeXa/Ej0DPK8GNhBg6toPN/w+uchj0dowDZejTb/LiFlg0QvNmnfwo5ojNtNgM2BMBMWehSKiKA/a59X6DxgF6eWUhPlw+ZqWXL7IK/dmgiuzud0nOS3olRNWPoe4wQH6YLcPNcaM8BehNy29Gz5mhQ0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>fW0bJN6DiVyxDBY2PUd8ETm2+cCQ4Xa8arWRx02WkGCrBrBiMhXTk+ZB4oTEHnqE29LxMGq3uYipr+pwYjatsVP46e3Fipr18XjEh5AVoYMN9O6xPeZ1Qb+dEskHj7zV2rDeD4QV5tYrmAf+jHf/+i+9nbSfg9ABuUgMFi2AsmM=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>+CMYIKDHCPyTxXyzvC5WujFCNZhihPkhbfTb7JxfVCk4ukfkME0bbeO3CqScj6IpISVzpy6deG77oPiz5pyvz4VBiJL/b2cCCp0hY6xGLKh2dBDav6KdSwOAhMxM00qXPMI95fYac5hUCgdyaxqutHX3687D9pXdovQMpdLWIuXkHF2fY+HGPYFgA2i2F/dg+M8rOtFHIfYP0zcoiQ+PGyi35m3U68XUUkcqmUqHxiG8AeTIuwcrvyj6DSBRrTON0oerYhqsftowCWB8xQkg/SyxulLh/1rA5PIER9O+JOnKlGqS9nlziK8Ni6A2S5a/GQ7l/+8p3A/7gZLb1GuqN60Z96n8nYCkXQNMPzN/pYLkTkbJzme+XE37rYBtMF7DJWWAWdCm562Ey8o5EhNjyDMLBaitXyc4Zv+Tf37FI0p54jByz1U+vZBOQgPLzFxg2yKYVg20zYFsh0L44sgN9gMy0osrFr0i5xJdum4xjjQ9sg4vM8Bv6/mQytqjaYYD+hTIlWrEUhLSXetmHCPF2VtuABjQ5057bztoi6UjcPUoKBoSwERAAsaLT19aY6FFz3Jwm09yTeDbnVudYVQghCG9FSY8otPACRNaaSSFKINCisKf2x1zvf6WR76O70nvi1yQK0bdlko6GpxtOAjEbdcbxxVx/7FjEeS4lim89TGncLZALWNMpKpg1CSKrDWLpy3gIykJtQRP7EaDsU+1d8LDJxBjd0OvCSXQ8rH0EfH3wkA2mqsNj2KKtja4h3Vblmy5yBki0xyKlZJqzQJNUkLgwZ9KpIYbKTTvMh1sR4Cys+sLkSfzsV+p7Q9ekSZ9Q3rFTiWFQQXR3FsVX4t5iRNxYvRp/7dLBYPRtP2CbdTXKsxLSdIize/cz+NPCFwClCrc+Gbnwr3rQnCBbYX0vwwiE+AyGb9DQ0DdNGr1LlPekTPX9r0OcksS01h+6ChC3KKVNQszlIScR6p50C8N04NvfHslW8RAM3Ae05y3LlaRqgF9qqLXLWh1VO4iPi/4aoKZCC86MqY29sxb8G8EMSC6aq++wkWGOEidiI+NQm4J3jnjibiQQBEMP8SzUQU+I09mhpqXZXzXskBtZJJVkTawoFbCL/X7vtz0vLFs3VfKXV6kLxC0akf19afzFvRBK0y29iOgi0jE923srbrNL5yRPNVGWIEyxcKwVDhJrHRljhaSU6usRJVYykIYt042NMrmMjCSVMKHss06samDK0CW/+tC4EJA9kmrSDdmizYqLpJezrxoXs6ierOguWcDKGm89czX7bk7GqsppYqvqodxXT7w28qEKHFvvX17F4y8y8kbB1Bj67wNlUymBOt+/gQpBlLqOqIWFrNHPgUHO39Je9osSiONThcG9faOy510c+uI0xWly1G1SG8V6xmDwaUavbs6O/1DJGx3TV53bWKfFV8r+lRBYqP1u9+QBhHkWqYRa0fiR8x1eT2jxGFQRaZOGfHxjhA1BpYQLJEtkyO9gWK56ebqUjlcbdLolgBlt/hHc35X2n0ZYvJa2QpTVf65E414GToOVh7R/gxa9RYCqzFUPkwwIfFqaN5aTxvtYR7GA977oiUBhuhzJnOsV1ZPefGGnc7U121jKrZds6RFVLNvIt5NU6tVUGWaGAszBB4RutgEfX3NNhuMmcW4FuVaTKLu5m4aUIKlbPcJm0zzNzKIWdFcSANjX8qj95ItXYNDt9/z61WnkOsXFR7wtx+gqLN8VClzKBAkEz6r1x1cribbC/YDFlS3duhOj/+wQBa/olixO5d2nyWHVqtB75cD53TUJJND79yyF4NsSMOtVowi81MqzdnLmNgGtBHf1gJLlJzD0TrLfiEto4oaPd8KYqKlFU1EnIPA684TTeDrluzxDgvqBdCL0KAF6HbZcYwQhl1MAZ/DC9nQXw9rPzY+NqMuwDFig5iRmEbHBceSEGmyDL4V5tIE3Sia8vb6UaLOUEljBy1hJrls7osLFPh/Pnqs0VKmRJC7Y9NNj2oh75gTQKDalAhbyDSFEy5VXLq6F4x0R2BwbZiCvheWR/0XJAR1RlTn75QNJMyvpwaqBE12O0Y5wPzwm5lk6C313z4uUXlE5bS+XGUAc8SrFKoE6KX05H8fMU7FVH42b1GCpEUCGZDZarxLaBX0J3tK2GOSFMZRrh6w6qyb0iGAVAYOxW6QiFTrsde/6Ec56o5X9szoUtDNNzZntorCLpOeXzAvurHfHXqv0wVTdeRBkwFkwDn/m6eEQZZ7ydT9NObJ1gVzEBZffhUjbSnpCCSnf12YvPw3UXcJEzE8PQ6ToFiIh+dXf5k8+w3kDfG3QjNLMKCtxVBWE+S5TaLjT5DkIbSiqzaZ/ZYVSsDe5FU0NeSXbhQBd6wkbwbSb70fYM3qjuC+lt6SKIs9CNfB1LDXpnvRu+ykVt1OFJk+dbBTrZw4Xh/9m6tj4Kqg27Jud5lEbK8t41v5WMTaglgF7yURXrR2n997YmsJ/ln4NKCCkdeandzv/3VBMQPnWMsWTPitrE/qtJANAATSQtOs3Rw9wHCuTZZNKowH6iQhd+T3iw340aPYmmwZc1Njo22cAvcACJH6i6yt+PUv+QzaNACH09K3hQ3krgdAvfpweMxfhoOZ4ANYUTs18ARrC0fSPZcAmicO+YfUntZi1mdXa6UUcFRaSdjtl29tEcATUayX8jcvaArrAVdUjfWtGiep7kvrWzcT1+zvT27287YrnK1FGY0j8TL1jjMYxfCRpUAa4nteM8d+oNQU7JjvAm1YVwnZtOWqsmJNOsoe48VYTqtjs0u61BGagNvbtvgh9uk6cTN4qM3KPgucne7gETIpcQl905Q8PVfpEfujcMRo4xf1su20z4OnTkdKZzgikMhBvG1xOFKzs4jpnk108OKV3imLiC1zo92c8cgMo2txbCM=</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>JUIk40LRH5Wfht8LmMz0/wBdztd0tk0m5hIgqddAS4VSHjqiSfbIdk6EpkrbZnuO+d1gwWhBpqS7IacUXS03MsIE0iguG2+rIBuXFHtsJnju9GQkxK96n5OdGDd03RQYTXFVLiHHYhW7KPUHieCCzM5bQzZs3x5aQQ2UF/4emTI=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx019fcc99-768d-2240-e86e-0719193446e0" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx019fcc99-768d-2240-e86e-0719193446e0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>YcRqiACquHLcFlTuybKNCl2xpSg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>x/1YRA/YQFrVXuCmbp4TX13vV2Xb+Y4pIANp/8cQnkeBi/G2I2OQQFEp1mHS2NEclOWBTQ29xymQz4/Q+5V9qagdHWdaXjnIqyCTPFYR4UnY+1rQFg4ZcRaHQsl7DiTvGdyvZ4KBi+RDTof2QEjuL4M5ut24Zb2qRV+BtUKTzNU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>fW0bJN6DiVyxDBY2PUd8ETm2+cCQ4Xa8arWRx02WkGCrBrBiMhXTk+ZB4oTEHnqE29LxMGq3uYipr+pwYjatsVP46e3Fipr18XjEh5AVoYMN9O6xPeZ1Qb+dEskHj7zV2rDeD4QV5tYrmAf+jHf/+i+9nbSfg9ABuUgMFi2AsmM=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3d4b13bb-d0c5-a56d-5f20-a6714f20c4c5" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3d4b13bb-d0c5-a56d-5f20-a6714f20c4c5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6nY6sdrMBUtn2IHsfN5t9Ada8zo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Mx6KflrV0ICuBDNQuWIduuOEwn3OCWugdtFGzJ6LH+0oUO6vGSzhwSTQ0L08wK+nTuVpm5AO1WamX/CscvmTPkIPWqKjxNAx9p+lUzIbl3yOdvXBoiFoAeuSuGke9hMjSHXtH2OZb02OYfxyF8QzK5h1vz/qvjmnpdImOTv8Z2A=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>JUIk40LRH5Wfht8LmMz0/wBdztd0tk0m5hIgqddAS4VSHjqiSfbIdk6EpkrbZnuO+d1gwWhBpqS7IacUXS03MsIE0iguG2+rIBuXFHtsJnju9GQkxK96n5OdGDd03RQYTXFVLiHHYhW7KPUHieCCzM5bQzZs3x5aQQ2UF/4emTI=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>