Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx061d9e55-6d0a-099d-7481-fc6df87065a9" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx061d9e55-6d0a-099d-7481-fc6df87065a9"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>I8pIBdhovFEk7yOYABpgBRTMcfU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>tKE8r9Pnzfg/ZnYb8nWSvmqe513e1bJ07xEtHqCVUjixWUG9W83mGV4QkVphVBofV9xLlGCxNr91v73fMsqQ09wWLkl8ItlF/HsBZ/cdvvKbRFh8oVaZyAfB/b9GSK0R2BpouUMsxJFm42WQyjDMciG9/a+OmoqrVjXwn9iBMMM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf90644ec-3811-82a2-e176-bdb82047777d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf90644ec-3811-82a2-e176-bdb82047777d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>UEuUoQS5HE/XYWTHtZtjXvpWWYQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>RPUq7RtUNVTzLmE4dN1VBGvxJ6VV0vwrrtPRcY4DiIxRbe4+5Aadx88KO87NnFaxMPfan7XKbzYWBvwzH7p1gkpNDxj2YthJfLbDoCkBTF8Uamhqe99u5kYrb0NX8LP6AGpbqtxyMDO7et1u3e0g1VrNJeSBNPcLTs86RVtO7Gs=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx8ed1309a-8e44-8e2f-ec40-e9c5c280ff9d" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx8ed1309a-8e44-8e2f-ec40-e9c5c280ff9d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>VWUXe+K7w8jdXVinGopA/d6H1EA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>EvTYk4W3yq1xSlm12NyoVrvYVxoxYuOfexx2TK/s8Vheu7rFPaTLSqrRAZSupfhbAZVWkhc5wDuZePdz8d5zQN7XrPI1ofpqAqaFh6GpheQErFq/bxJkYKb9SPsaaYRU3+n1atmHyiSD4OBmF9J4SYqiDEI4ZfdVTujKmXYtI4c=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx1f30fcb6-7077-dd2d-b4c9-e803abe1ebe3" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1f30fcb6-7077-dd2d-b4c9-e803abe1ebe3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>/CyMXYQqXF1ClQLN84G0l0v6yFM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>J2o7LmUAO5mjuqJT3p/QxTf5JzYy6fFXZmCP7tdaax/9DUoPMDFG9VtZCDOu24byWCmn7Fhlmoz4/y73P0h6QCmXdMChJNWVJ0vx81RbVKDCwGwhy6wDC2tyidw4iG9R3zQYCqhy8A7LSWt9tQGpe1nsinFZLPZVM8JMWxKXO/8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>CW2m74cnWOgPsqkezewLn3fja+4c65FJHKRaUQlUDmnS+uuAdt6lsGxDNx91fI78NUWQXslCOjx7E6ADlIswuA/bJuNg1tgOfSaAujAf7AawnpwKgm/JIUiG2EMyXjR24svZ05vokpVmgbPsPlGfOizI2D7u1aHpO8hjEXipeyo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>L8zvobygm/nIQpSmV4JEQpW2GT2/lIE7Jn/srVOPSSEZgHjoseON436RzoiQKiKqBIEfkxPdqL4zSOaAeW4rnPfAwIVQ54mfNrbRiaKVcL8L6RWe1KYtoJimy3wrWZPrLIzYCpjgIMnLNhIRnkzfeE2tg07b09Vi/Atpxh7Atlk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1eef98fa-25cc-5a25-9620-b2e88b3734bf" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1eef98fa-25cc-5a25-9620-b2e88b3734bf"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>WdzzPKagk5uccY1ThGFemObjnG8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rz6SATB2fe94cGOtus+pQVOLVy2Rj29ZyQ+N1oWFR3ovwmU3Aw3gE3UiZwrAHEz/Qjak29ZUbDVdj8rcMO6AaGg5deuTFlIt95mkZhlZOxCYAl5o3KffBA8qxVpuRT38YO4ICYVpU7atRpBsBzIoY5aw4pwqNE/JWRN/TQV5CO8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>CW2m74cnWOgPsqkezewLn3fja+4c65FJHKRaUQlUDmnS+uuAdt6lsGxDNx91fI78NUWQXslCOjx7E6ADlIswuA/bJuNg1tgOfSaAujAf7AawnpwKgm/JIUiG2EMyXjR24svZ05vokpVmgbPsPlGfOizI2D7u1aHpO8hjEXipeyo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9258d574-e440-470c-3751-223bb5ded672" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9258d574-e440-470c-3751-223bb5ded672"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TjiCATPmCRbBBEds52SfEsMgLpo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>RpdqJyMUNYNtEuM7oCwJhPg3HbnQzOHI/N1d3y+XOJxihELNtxnThyx6Ndu0ARuekhmgevcjWqbtY5DfD4FKcylC/CAVmzYTNmh6EIsEZHfg3anl1P2cEmOVz0TXXHWSmjxNFhbZckAOQ2Zt4QkWOuQTA8xR2uZwne3fgINl7aQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>L8zvobygm/nIQpSmV4JEQpW2GT2/lIE7Jn/srVOPSSEZgHjoseON436RzoiQKiKqBIEfkxPdqL4zSOaAeW4rnPfAwIVQ54mfNrbRiaKVcL8L6RWe1KYtoJimy3wrWZPrLIzYCpjgIMnLNhIRnkzfeE2tg07b09Vi/Atpxh7Atlk=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>