Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx99ea6985-2709-b31b-8559-238262cf61fe" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx99ea6985-2709-b31b-8559-238262cf61fe"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RF3cyrDljW72pv+zelf/Kp8Ufe8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ByGXI50hKxWHrCPKlxuVPb658o04MAiKYG220EC99+tjgNGOe7vO+xZ/ktwT9Kt6INb29jxKOvNwgCte6GcXiPJNreM+aVtrTqGGPyT3iKRYLS7eAz22a4WnWWnfhCtAUpuX5+ZW1qUvTHDZDt05sjZ6wJs1WDvDwb6QlJHu+F8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9e246130-f437-9be5-646d-ff6f57dc9094" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9e246130-f437-9be5-646d-ff6f57dc9094"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>yctKC1wCoYqDx2U5SkGRAfBbu8Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>mM4Ohwpvrvb2QeS2wimvpcDu4dJCNr0tVQ5/3YVaEitTE1qI0YUnIpt7svlKEB2HhfDZUQIuy9+k8sLMy+2BEpPYs/EB6iCJCEkUS9m1sj1e8Q2Wwkc1yDTet5xcBYSu3rz9nhaq4DCw4b6m//K993FZbA3glKuvs5Ly+Qnoz0w=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf6e54f7a-e4f7-cefa-345d-11ed2210da83" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf6e54f7a-e4f7-cefa-345d-11ed2210da83"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>v5IxB9hIsAWvQ9qVI/IOZQEfGec=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>vN8OiCT4uzszc5HFRtD1qjQbScy7IFvkztHfElYvzUYIEoLyei7cdIngYzJePzFf+M27yNV4o8yeIBQOLlz6JS3LzYGwh5YsCKRiJZl4r5I3302ZePv4r7rMs3HuTK2Xj9L+n9gN1mZZgLABBpo6xKjdupUWEkNFnUgGrcaJULQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx4f4ab9af-4f92-7579-3a7e-7a7ccf538637" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4f4ab9af-4f92-7579-3a7e-7a7ccf538637"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>p4S11ohtcl7czEHJkooG/5xUTiY=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>0T1G+5PwEF9c18w8bz++QMvo1vt1OFkPn2PVMqr/X4Zpyo/4OQ1hjr/O4XT7819v3nGCmiY6jTWAQU/SUmvWa61IvzeCLsUtxLxXdnWSJNmG0PeCvJ+vqSo8+8s6clDPCqarcQqQpbc9zkLro82Qk9he/NLWOZDKEL+OlHzJW4c=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>S5GmebVfwu+ki2ngCYFvsQI1jl/0DkhZofnd0+SA68dzi/E3SlIzCs/KsV63HfWMOaf2XfXqz/MG4cbq2i+8dRgiwCQ0mbbT1GR/rpnkqmhR1BjYCIHZ0mZHOtGNKgFtFn4lOFkvIIBy5Yx8trKOA+LXw/USoOtZ61W9sdzLmDU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>M1i/u0mH/EAdB6YRGbnR9c5wSk1N4E9SgYC+TaULdCzvXlx9Sosklh079Aq1nKvuuEPPNwV8ZDsjWvLBFKIFN4mAonqV/D4YLGM/4fah4fDiUdQjjaq8hfJtj6kGaFOoBPT2xf6rAuyHQ09fyjmrHJwAkjfCddwOW2sBpj3p4wY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx21557cfb-e8f0-6d5c-bc13-8d3739bbb510" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx21557cfb-e8f0-6d5c-bc13-8d3739bbb510"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>k9DiauHFoamA6B9Y8JLC3Ypz3dI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>onTZWNBzhdGl7c2d2PdldzseI1iASoq2ywmAZgxjLK0VKJYoHfQYjjrot+LfY0nVuAhcdi/FInOJcct605oUuCfge9Wdhv0OlUmgpBR1Rsj+AHL8tuKs3h1uXTQjCB14bQHWkHpwKUtDZJE8wRktU7IRsXfEtWRt5XZYU5nxcOU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>S5GmebVfwu+ki2ngCYFvsQI1jl/0DkhZofnd0+SA68dzi/E3SlIzCs/KsV63HfWMOaf2XfXqz/MG4cbq2i+8dRgiwCQ0mbbT1GR/rpnkqmhR1BjYCIHZ0mZHOtGNKgFtFn4lOFkvIIBy5Yx8trKOA+LXw/USoOtZ61W9sdzLmDU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx3a156b29-830c-1391-5129-bea188b8ec8f" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx3a156b29-830c-1391-5129-bea188b8ec8f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>zC1xr3z5kjgd2W9sUs29p138vIc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>cBl1FoA+lsSJAs/fm57Ut3E7vHW5vSKSdtZF977zNxYfE2fRSvZpf8thoyJI7bQY6Wc3PPQXQP16dNSDE0gfrs82PGkW8aJ7XZUQVPuWFli/i9FHtjptn98o6oJNhPZXLzX82qrra91WJf1NJwWg0z51RjZa1eCkhEvk1zLehP8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>M1i/u0mH/EAdB6YRGbnR9c5wSk1N4E9SgYC+TaULdCzvXlx9Sosklh079Aq1nKvuuEPPNwV8ZDsjWvLBFKIFN4mAonqV/D4YLGM/4fah4fDiUdQjjaq8hfJtj6kGaFOoBPT2xf6rAuyHQ09fyjmrHJwAkjfCddwOW2sBpj3p4wY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>