Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx0375a268-7c9a-017c-203e-f0012bd229d8" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx0375a268-7c9a-017c-203e-f0012bd229d8"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>WB4wM8ii79onver7zTB6gHjiCl8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ZNRESKm+6wuC+EyesQYgkNFbXv9lBEgLfFmtSH5Y3B3e1cFllqgfmrqj8GVg2+op0E0OckxAyc6/fj7DTIh2YqXmvbx9Mw7q56d0xOfbfFJbmxeZn06vrx4xxna7/70x3Getk9upOEuZc1BIg+va6YE18DXADhGEzoWCScxz5eQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx58b88f67-4237-0928-5f8f-a0059d4ee6a1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx58b88f67-4237-0928-5f8f-a0059d4ee6a1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>VnnRwtS4p9tyC9cEZhLFkMLWRys=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>yofBiO93ORGuNBdUj8ozsck1rQc+7WybPA47pYarSR5cGSDabpNqMORubC5DfIB+dFvC8U6dEOgO9RznVztZmHRepZi5pmPZLd3y6u7lrI5aYqKeg2DqS4y6Q4czYP+BpgJ571zz786AfpdaQ1BYaAgBiZXynysKaB2ZFa4VbhI=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxe5ee7c9a-8d67-f7c2-680d-02179f35457c" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe5ee7c9a-8d67-f7c2-680d-02179f35457c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>GCJAGYzebis98zBuJ5SMvbsuhDg=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Z+Fy8CfMVbEi1YwuGAuJwYlpMSZjr8FNxvOvd2X6nvp3dHCqygxR4/fdn6tF0ecDv1cExl+yFQaskqZ5CjQhwfqhmu4izAoXoCDDExzkDf06W+GeHdsuHWmbyk/g1z9LA2+W0bJo0usr0lNIvacHS1knWsjFDLBpBNMKSb5X04k=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx46b8a475-5feb-bdd4-2ce2-bf53ac08033e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx46b8a475-5feb-bdd4-2ce2-bf53ac08033e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>xcpynLy011/AK6e1MNF34bZF00g=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>fLnJPHIvqwXq/xHuV45PlfdOSTDKW9rJ3e43YIh46GJZQGInWa5nau6UXb4Y4cHKOUM7lNO9nmQRF+51WtSmopBoWjXEDROgKpxC1TNvFddrHSVd/LugSwcqhy5Xd3tNS3nmhJmrTZ7X4GgFtx4OYXOw/NsiAL/17HpVw/MKXMk=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>xu3ApIGaE232f1OSYB1E57pTEadPuhc96nVOMte0qKKKaxnZzfe4snxwl3ICEAOoHGqdQ+GvhvZiMBGyL41wX6ZNLdAkV+Y69i1ECxI/Ek4O/MOny8WqlgXVfJFkuPpjKtMcfGk8lvzyUvknykVyVRa+0ciVFZZd/aV90jKx6PU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>txBcCUkzfHZduMwg/hfjS+82rKpQirxXY4JCVb79LAGpUTCUktPwdD7Z7Fn9PoP4IB/au3LQQdFd2N2nV9oYPadPUTvwz4mY2N9Lu4DOdP3eLnVfbhIgCQEaLjhOcz6TRk7TgbtSXyKzutOxkSQ1HzdvQEVq+3RLQwG1mPWZ/Rw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx5ae0539a-56be-3717-19a0-954d09678997" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx5ae0539a-56be-3717-19a0-954d09678997"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>fjxB1pHC4tdMTSIl/j9oJ6Df8kw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>EovZooSxPT7JskAjqWRbSg0g62pPm/rilSbBX/eXIyleOnCJZVo4eTtGlv9hbN18kCYhVNVj1ctImQNIKBftyNgyHlO0sQMvebi2B80agcDtJLuBPuUvH48qSNhhSb6SFpm+DCGFFLDJkr/TLTqVqvaX0BfEQWVML01lF3aPCmU=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>xu3ApIGaE232f1OSYB1E57pTEadPuhc96nVOMte0qKKKaxnZzfe4snxwl3ICEAOoHGqdQ+GvhvZiMBGyL41wX6ZNLdAkV+Y69i1ECxI/Ek4O/MOny8WqlgXVfJFkuPpjKtMcfGk8lvzyUvknykVyVRa+0ciVFZZd/aV90jKx6PU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxba7ae526-6385-eed3-b7e6-aab55a0eabc6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxba7ae526-6385-eed3-b7e6-aab55a0eabc6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>pRim1lRU25HXAPcAi+beWmVp0Uo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kekIprr2va6A2PdZMyG/t5KIClpn1xAneCkHwiWuwMM0vKwkWlkjPBquvNiwm+kXGTa+oe1y8ZpZLrUWbG/wZaXyFd/0Q5RYpKpJY3i6Il37Yc4lw44SyzKOBQCW9NL/eGQ6dUmZhaRMrVyZyH60daLh5q+Nr0PM02tmr2Eq008=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>txBcCUkzfHZduMwg/hfjS+82rKpQirxXY4JCVb79LAGpUTCUktPwdD7Z7Fn9PoP4IB/au3LQQdFd2N2nV9oYPadPUTvwz4mY2N9Lu4DOdP3eLnVfbhIgCQEaLjhOcz6TRk7TgbtSXyKzutOxkSQ1HzdvQEVq+3RLQwG1mPWZ/Rw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>