Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx45efa4a3-edc2-a4b5-daee-327ad5b9003a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx45efa4a3-edc2-a4b5-daee-327ad5b9003a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Irk9A7V1Wt7TkSosbwxMhryAc74=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JA6KfVAeoaSwwe9p13aATQRQN38lmNqurlvyIYVYY2ntwTkDiHK9V4M8qH24+GDNqaCkTQMR5d0xkFkm1Pyu1YXIQHR6IaSKZro3A01S/3HQOCus1mYQ/pWEsGDeS+CSgHCFwWHf7un/UZ7/XBnFSx0EvtovT1DnCz9jBfn3WME=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxa4dff6bd-0e87-805a-ef30-d56cf7a72e40" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxa4dff6bd-0e87-805a-ef30-d56cf7a72e40"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>4eBTBq+7wNVPFWQhaFuun2olv8M=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>IOjt9PUz/Jbz4YV1DUrCmJ+CIBWuOyyGLI8jLdjs+MsMlSAe1+xuzMD9qL+96Jz6BOtcYMUEiICsc8fkwwl+wNd8UhJui+mzF4JgKsjnNqMxZ7L8BiYO1n4x7MQp8A/uFq/KokNxVr9MXHWu9ssKM46hZ7NwAhDV+oxmLO1oO1I=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx64125db4-e755-8950-725b-74458ee025ce" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx64125db4-e755-8950-725b-74458ee025ce"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>lQx3kqDyGthHHgFWjtc7yqKYwaw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>c8itOek9CcgFpSj017HWll7qE7/HNp0fRo8crFpcBliB8aHGQNbPyAbWSSU8BobtX7Cs6SAJI8O64JQ4T88oJlbIH/NyfrQTzA2pGdKxmjyCVwDrZK9nTV3E4dIGpds6cO7f/DR1U7ZlyX3gEWqjokCpFwba9l1zP5rsoi1FhVU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxf69436f8-d30f-41a2-2752-285e0070e4e2" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf69436f8-d30f-41a2-2752-285e0070e4e2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0+Ak2BcIdVGP07LTC0UPvPDa/8c=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>zcQeLfVzBlKW8i5tVtzl21RpESCBnkaHvsatQCpocRr+0KhbhTM1rYD3NGUKnKHp5TJQHjhURePPWJn8X8OMaKnlK6Z2z6V4GHsaQTbLLFl1ucrKoh8IGQblBOsRcHjqDeh/rEJpsqTZsxd9cy3OU0uFvkn3Xsgp/+rcCg3Rp08=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>VlhGVeB5NhDS8oqflLafxovrPR3bV6BgiLDfG9NrqvptwMS1WTVITlhpU2onPr+UqOE+8Emp8iDbMQJJ9+X6JuM+zKcBk9GowHCK6G5333qJ4mncUP3oTWQlRw5bca0TAA1xeCjQ6eCs5ISR4AJG6T0xgzirvVZabK/uN0KqluQ=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>qcVhf4LVnfKzOmH8h+RXf0v9U1VYkSCqY5Atunagp+ePAUvCuyDRJxkM+m8+b04z5McF0GYKtTsLg5gBkINNepJ0yMYTdJUcRHdiMHLwqtcyosjuVokSpMgt5UQdREVSBSpR3FdzkSWef8rdHEI2Me30hN2rgV/bh4u39fcYvdw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxb7419e6b-b19f-5a5e-4b6e-7cd1ecbfc060" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxb7419e6b-b19f-5a5e-4b6e-7cd1ecbfc060"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>t34PXf+Lqpw8ed3lZtIqgBiKsY8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>E+RUXceQKAOfiBzV38ISfCSbwTwtXp9Y8Ms4Naj/ug/Kkh77FBbDs8krnERiAlg6KdcvmNcKOcxX44DoRjMHijcJnd2BSECAJArzMYpNwCLew9RWGx9bgo2P7NpBmTdpzi6vnkW+Loy7H9nqpKD3KvHOE8nLMDAOppXqj6DRaXo=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>VlhGVeB5NhDS8oqflLafxovrPR3bV6BgiLDfG9NrqvptwMS1WTVITlhpU2onPr+UqOE+8Emp8iDbMQJJ9+X6JuM+zKcBk9GowHCK6G5333qJ4mncUP3oTWQlRw5bca0TAA1xeCjQ6eCs5ISR4AJG6T0xgzirvVZabK/uN0KqluQ=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx96e28120-7958-9b1d-d303-a8d4384e0135" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx96e28120-7958-9b1d-d303-a8d4384e0135"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>NYYdaziZp12+92tDxv7saMTZP/k=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Qnqm6xwyv6u+zGdXhK2Jnoqrbc/yoBaDdaoRPjieXmvB/aJUAAdmM6Y9ONLZbw9RKF2z4ozvFFEk34Q5pQK5w+LbzodDVYZxih/P3a4uHBLn+69EDBj6VLl/uXuuLWul+xxI+g9sHnCwnvY0l50RwhYml2+5nCnTKvRyWUW//Ms=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>qcVhf4LVnfKzOmH8h+RXf0v9U1VYkSCqY5Atunagp+ePAUvCuyDRJxkM+m8+b04z5McF0GYKtTsLg5gBkINNepJ0yMYTdJUcRHdiMHLwqtcyosjuVokSpMgt5UQdREVSBSpR3FdzkSWef8rdHEI2Me30hN2rgV/bh4u39fcYvdw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>