Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxec1890ff-60eb-b78a-9255-f582658f3819" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxec1890ff-60eb-b78a-9255-f582658f3819"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>8/asr3FICkQoDu8ZzHi0SX/gEXk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WIdV04W+gWOO0rRAj/MkmBxxaTbRmvOsaXoC/uF/lT+dn9IALeZbQCgQ0WhI2dKP0Gnbbpb+aNGnuOI5oNLbS6AYoSOVOgBKSIhxBt928Fbx/eaJYC7mDoyJXWn1Wd0Z05LgCG2Bi394ZPoO71R4QBt/T82Auz9RlJAlRwYj6v0=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx9e89ba6d-e133-4c9d-fcbe-4288026d98bf" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx9e89ba6d-e133-4c9d-fcbe-4288026d98bf"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>iWj2fBOC6QNCSDqPIxyw71ulwG0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>f4/0MTPmb52hbsAt01Mi0NvIzOu9d+nokq5wrwJxS48lo8zzhAsKfvsXEdLFPmfb+7tzmqx6Hrh5903mzm8cGCt4UCqjGRcLSwRRcs8jbQn4f/2pvA8tIuDfhEZ97pABAzPMcjOk5MMb/k0kDHQ9HzcFV40ALganEtKlGA2YErQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx515d57e6-16e1-0de2-a8ba-f969cc20d88e" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx515d57e6-16e1-0de2-a8ba-f969cc20d88e"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>tbeNWgQwUHurPtuRGjCAsu7wpBE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>HY9ae9bxRRY9N4Q9ecyzqHVggpjVoWOYoV2wRxTegzBTyqTy4p1J+TtVgv9yAv0gDtGDXxPI0SLRN2mlSDYgOOhYve9bpr8/Y6yfI55h4q/9dnZV1a7DKmwj9xnWCbN25FRWvymhRIzlN86IPGWY7k6ZJffFIvpq8nPJO2oHIwQ=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxf60fef83-be12-3b1d-4917-4df5ca126f6b" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf60fef83-be12-3b1d-4917-4df5ca126f6b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6enZ105M7IM7dq3KLnjT17R+GDs=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>VD6rT8Nbr6nTtBLkLghS1wRR8NBusLnWQ5A6rkyvioiAJvfCGGhIGPb8OwFt1W+9QFS0vFscTkIwwloDY0sHzouJ2KsDyqljJxKVlECTCQLZVpjzT+dKwzo1anwjv6zCf7EnajllP7eyqA1e9zOAGB2is/ySdBFg52C55ZgXu7k=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>fPkM3oi9Oh2EF6s29n1p7VyGHqXR6SvE19IExAYTBdMxpmvRYj501h6xky9RqkDm3y31J+/eC7CVdL/iq+jI/TzBEJPbZdG0QL9PH9YjfopWU+GBIxQ75YK/uVQQPFZea9L3/cFG/KK42G0Hjxu80JXAJS9sWn0Y2lTW5zg0mTo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>pxihf4JIbzyYSJnValaAuQpAYclMV8YBISqMNQy9Bn2SbHFtmVrbJsQEjyiFxOHhSiigMQxbvo+MbGO8aAdiB3ee2qUTrPaMS8UpTg2k5e75f9FEvjFghQEIORaE80gMxAtJ0g0YFYuPH/opVUuCW7sbnCncQAZ1iUniRpv+ak4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf7db9cfa-1a95-9f77-a64a-77222553fc86" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf7db9cfa-1a95-9f77-a64a-77222553fc86"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+ozvQxvGhETYbfvvTUgDLZLJurU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Z0KBGmOY9xOYtOeJf4bUsqyYvJ6jSp8wxRlQN83bVN6jhffp/nYYHXzgrM/BPWIsvsn5MC9ToJ2qDQydpZgzgC4f9OxHnBHTuGwNJ+1kwENYa3QECa7pyQUflJp2qF99mlUb/StkKMOEVb7YV0fWdwpR8yq3/nO8EZEyd6E5B78=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>fPkM3oi9Oh2EF6s29n1p7VyGHqXR6SvE19IExAYTBdMxpmvRYj501h6xky9RqkDm3y31J+/eC7CVdL/iq+jI/TzBEJPbZdG0QL9PH9YjfopWU+GBIxQ75YK/uVQQPFZea9L3/cFG/KK42G0Hjxu80JXAJS9sWn0Y2lTW5zg0mTo=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxd48cdd95-b735-2a37-75be-2cfc8bfb7543" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxd48cdd95-b735-2a37-75be-2cfc8bfb7543"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>uU4Qd622m80RdgbYy5SHA7vVmqw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>RwQmVxj0sAHjREFXIt8tcgdFtSRqRagU8ZPzp1AhkayZQc4Y+MDnzoP+8ykG2RrBADr46U2XBam2MhXpFwcUGGB1OkZEFIM/qfjC98b7fpg1Td7MmfsVJDpd9coMDeRC0vrYt0zyBQ1ZmtuCRp1VWjJ2IYQ84yi9ZQW3QtU/DJc=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>pxihf4JIbzyYSJnValaAuQpAYclMV8YBISqMNQy9Bn2SbHFtmVrbJsQEjyiFxOHhSiigMQxbvo+MbGO8aAdiB3ee2qUTrPaMS8UpTg2k5e75f9FEvjFghQEIORaE80gMxAtJ0g0YFYuPH/opVUuCW7sbnCncQAZ1iUniRpv+ak4=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>