Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx33a73895-e8b8-664c-b394-3ca7e2f4580a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx33a73895-e8b8-664c-b394-3ca7e2f4580a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>4OQM9a7a8c3k6CFwhSVTm7viS+8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>TnSx0wuRdT56PqexneP6Ns1MRtNbjNW/c5HFKlHVubWspNrpyS79xneMvxvLGJPupjvzEJlTjFb6FqGGtg35mDk0GOLoDaNt7NebKQNFX+mBPyqcjJTUGxFaw8EJ53HEvpQL9KB6TT9EsV2Bm4eCmNiD+a0KTEdLTcIFn5N8RQc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxdfbe5f48-2e92-9391-67f0-35a5afd67782" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxdfbe5f48-2e92-9391-67f0-35a5afd67782"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>NuIFrbroU7UNYb5Lw464R4iHdgw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>LBqZMG38CdFyVvN1Lw6uAe5tD8DaV5yTEV8x1yPYw3Pbp0KbQT/BgjYYtNx2r4ftwM3L6wHBFgV3CWg+CP/xkW8C3fo7h32MonTf80zysnL21/yAw8XYoAElQuhvPamC6GXAmGtyhDS8TY/TTg7DiN/UL5oU1V+8iK/eTBRpv4M=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx31efa224-6acf-aaf3-931f-57a1a0625686" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx31efa224-6acf-aaf3-931f-57a1a0625686"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>eW2FUb680wX2xdh/6EdVGotp6CM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BU8mshs+twctd6GKgb6SSW5Wn3ZZ8Nm3cOQGnT0U/u/4/zH9p4pCRCK2j1vRZ1wk2LW0XkFWmA4LSTDDnIYEyPKhBMhgPmSJwbQTm6Y4kdfPRP8KiweYtzLuzq/rSsHrDD3OFHgsy4CGEfzPkIV8Tc3Aoyx5dUB+AAQRcoyhzG4=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx1317b7e1-0d9e-c882-58b9-a3d046eb5e5c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1317b7e1-0d9e-c882-58b9-a3d046eb5e5c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>f5x1s9ztPvfbgT3FZa1Ob0ia6q4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>p+0CnMhS7zlgdhjLt9ejQdjjqArI+Y75df8Gm2QLa9pZluieczsOBuwt9b5S+HUDAGhhwvrcBRQdU2hyW7e/XYBy4U3vGZZnVcnTjG/7B4OJtPTBh/WaHxBqgtvgwg37VPWxv6RNgzO53E/GF7saEGNJLLezrWo8xdldiQ3Z5A8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>NSJRrpL1Foldv9+7NyXA/v7DzG2yoQ0FR9I3FlYJfR9c8AnAQnK7jq6NaYOnm7TEu1RI9JhNc6gMj0vNPR0f51oQvJZveJIvIg0lgsm6M4JMC/rKW/rT7Q1ohyJBwQR8xxKEv7LaK1l1lFobeiw0jBYUp06z5Ym2fM04oPeakZo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Qw/vaZfY9xawExOIRANzh/jc9l3LGugmBPUn2fNRdKKlHBcl+Vw5niXVTTNB1TfXAROtQyCPC7dK8zNt6i7cxsMH2rL+xKo1kq/biL/xP+HqROifmcy0hdX5goUV1UBGDVPEtN2ohzIQsKsNz6HON4fSUnd7Aektyvztex/Mh3w=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxbdb8d611-f734-1086-2bab-57c03dc1d2d2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxbdb8d611-f734-1086-2bab-57c03dc1d2d2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>YcCCBqlMX9KQkb/SZHNEux/QLGc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Yr7qUe9s6dUS2EvQoM9WVQ7hPQoPZ08i7ZzxvDABw0MjqDiJ5YE5FVPsvqkqOFBqdK4QcZ1HrTzweYP7nsP15V/vR7vfL0x0g5qvRyscghvb3ReWN/god5l+ib7UtdPYCRaj7cdLCwI3H2kFCaYLSukZZnsk05Bb414RbFTae7s=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>NSJRrpL1Foldv9+7NyXA/v7DzG2yoQ0FR9I3FlYJfR9c8AnAQnK7jq6NaYOnm7TEu1RI9JhNc6gMj0vNPR0f51oQvJZveJIvIg0lgsm6M4JMC/rKW/rT7Q1ohyJBwQR8xxKEv7LaK1l1lFobeiw0jBYUp06z5Ym2fM04oPeakZo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx16c0f5c8-9d80-5da7-2198-5dc91b5a9a63" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx16c0f5c8-9d80-5da7-2198-5dc91b5a9a63"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>AaajRv20yCHcLKb1bGh/E79gNLY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>K8gZv/OpAdEgsZKcvMFzWCJtEAPopnOOwHH+8Qi08wocpJNVNdqSpb4e2ftFta7s+d2zcmhLE/Yr1nVxCSeK5H+NJWsXwBz6ghlOxSQr/IRxXd1X/ZaLff551ajG5Kv7mJuTgLZqHL2rgETDIg+HkqVhx5SwkWURY0EjtFsaHJk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>Qw/vaZfY9xawExOIRANzh/jc9l3LGugmBPUn2fNRdKKlHBcl+Vw5niXVTTNB1TfXAROtQyCPC7dK8zNt6i7cxsMH2rL+xKo1kq/biL/xP+HqROifmcy0hdX5goUV1UBGDVPEtN2ohzIQsKsNz6HON4fSUnd7Aektyvztex/Mh3w=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>