Online Tools Menu Close

SAML Response (IdP -> SP)

This example contains several SAML Responses. A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.

There are 8 examples:

  • An unsigned SAML Response with an unsigned Assertion
  • An unsigned SAML Response with a signed Assertion
  • A signed SAML Response with an unsigned Assertion
  • A signed SAML Response with a signed Assertion
  • An unsigned SAML Response with an encrypted Assertion
  • An unsigned SAML Response with an encrypted signed Assertion
  • A signed SAML Response with an encrypted Assertion
  • A signed SAML Response with an encrypted signed Assertion
` 
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">[email protected]</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfxe7aeb1eb-4c86-1e0d-7c8b-d63014ad9e3a" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxe7aeb1eb-4c86-1e0d-7c8b-d63014ad9e3a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>qbkZayk6tyvnDsuqBQZ00ymX0uA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CL/lmOVEKOr+Dh3Bo8JV6Y7PQbkf0MInlDJkL+n39dfnw3TWLqIB5AY1M21GLCuODsNfItfuQ6b5tCM8av36rAURxGW8Nn8NR37Lry2/hKIky60LJ5R0RVtnOuL5PQy/D+vpGTbA3o6ZTgK1yqmWzfY2Ys54Svgj4HkLT+KKiOw=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">[email protected]</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfxf528afc4-416d-3de3-c4b0-f935c08eb033" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfxf528afc4-416d-3de3-c4b0-f935c08eb033"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>YUUGBqKq+dByYglHoQDLMzFBS/4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>0fqUO36v7ix5HZxSncvXhQbNSX3jth55bzBkf8dNSjvenHIxyZ7JxMyfu/n8PNUIVsMR+EGZLMp2S16h0uSzXGDGGNViKaPF7HWVtOgPJuLAylQFO6efN1kgcdRjhYSOvGjGt3Qi206suzKj2F9s3jVKzPt1gDyyo/dyZYJB15E=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_d71a3a8e9fcc45c9e9d248ef7049393fc8f04e5f75" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">[email protected]</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx1b804223-6875-32e2-e9ad-c64f5d853d91" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx1b804223-6875-32e2-e9ad-c64f5d853d91"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>5rzVx5uX1sGevtcOIslnCLS3Um8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>k2rHKWct/h35cyEOQHl6oduwYMnwtD6etBxRL5W16jvPiO24KZ/W/lkNZwiSiMIUSueSuKGopXI5UEUy5uohn0qqANegDiGx9nT8B/zDpCQgmW+lkSbccBUxfzFqenJMDPrq8FL8IMMrkGgP/8Dr5LUv0fgaIS+FlXePS6K6pdM=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="pfx999d2edf-5969-2a3f-f50d-defd0bef6ee4" Version="2.0" IssueInstant="2014-07-17T01:01:48Z">
    <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx999d2edf-5969-2a3f-f50d-defd0bef6ee4"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>i171ypPFLkgr8Wt3tXuHHOtTpFU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>t57kyxIuFtMm82D7OknZOnPZtuEpW6l1VKeMwQLmLyVaXczPEr+yPKAI+Q2hXC0v1uFF0Uxt2SqgHbZ5P4/osTpz4MWr4ASjlS4JFCu27x0db4G58tomz1IlzFFqkzpl4AlgO3JcPdKOQThPrEIBbR+DYh00x2xMFVTFbXjo0HY=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICajCCAdOgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBSMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRcwFQYDVQQDDA5zcC5leGFtcGxlLmNvbTAeFw0xNDA3MTcxNDEyNTZaFw0xNTA3MTcxNDEyNTZaMFIxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQKDAxPbmVsb2dpbiBJbmMxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZx+ON4IUoIWxgukTb1tOiX3bMYzYQiwWPUNMp+Fq82xoNogso2bykZG0yiJm5o8zv/sd6pGouayMgkx/2FSOdc36T0jGbCHuRSbtia0PEzNIRtmViMrt3AeoWBidRXmZsxCNLwgIV6dn2WpuE5Az0bHgpZnQxTKFek0BMKU/d8wIDAQABo1AwTjAdBgNVHQ4EFgQUGHxYqZYyX7cTxKVODVgZwSTdCnwwHwYDVR0jBBgwFoAUGHxYqZYyX7cTxKVODVgZwSTdCnwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQByFOl+hMFICbd3DJfnp2Rgd/dqttsZG/tyhILWvErbio/DEe98mXpowhTkC04ENprOyXi7ZbUqiicF89uAGyt1oqgTUCD1VsLahqIcmrzgumNyTwLGWo17WDAa1/usDhetWAMhgzF/Cnf5ek0nK00m0YZGyc4LzgD0CROMASTWNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID SPNameQualifier="http://sp.example.com/demo1/metadata.php" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_ce3d2948b4cf20146dee0a0b3dd6f69b6cf86f62d7</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-18T06:21:48Z" Recipient="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2014-07-17T01:01:18Z" NotOnOrAfter="2024-01-18T06:21:48Z">
      <saml:AudienceRestriction>
        <saml:Audience>http://sp.example.com/demo1/metadata.php</saml:Audience>
      </saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2014-07-17T01:01:48Z" SessionNotOnOrAfter="2024-07-17T09:01:48Z" SessionIndex="_be9967abd904ddcae3c0eb4189adbe3f71e327cf93">
      <saml:AuthnContext>
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef>
      </saml:AuthnContext>
    </saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">test</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">[email protected]</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xsi:type="xs:string">users</saml:AttributeValue>
        <saml:AttributeValue xsi:type="xs:string">examplerole1</saml:AttributeValue>
      </saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ACDFq0wsdY2CcM5/GMYoElCMApDEn+xGFPbxegtlSzvcCVrIO2Vv9ntDF/fe4DBmSnaHpvAO7i/Recq4/XqQ0e1nBe/G7kmtRgCS9OEZpkdgkw5tKzOwSU9qgM2slfqGqYVlhK5JcPT7DLLfS320pU+yyyCSiKYVxuIfUBglKK8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FYl6TLmIllYe93ObVYtWbTOjyDimjVxKBa3+eNwRTbDzRXS4kax6vm69JK+HUEcu9SJAKUjJjObkRHWDQafwZT7+lddZ1gROUGY0Q/31VNlVuxVL1SAC7VMaRGsMsWIgeI5ZbD3d5ahrBjYbgCm8SI3dTDa0wcFqQZmUiF+fdaw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>
<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx64c01961-c160-dd2b-7b05-aeb42bbc8af1" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx64c01961-c160-dd2b-7b05-aeb42bbc8af1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>rLIJkSy5MbPqfhwVJ5jAYOdxgZo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>hyyoOp8zv5ddSWqPF5fzanUSx1WZNn+7vqcAaSK2jmCSEPTEKET8KuBgXcy2n0B3oLJlpjHceTnXq30P2vf5XjcoFGKt/uEyL/Vi1fCPWgJQyFsHhCPwOqXTlZLVedM027HNJ8mNVl1qQqYGJYc0MgRbL+sVn1JyGm/oa4ndCxA=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>ACDFq0wsdY2CcM5/GMYoElCMApDEn+xGFPbxegtlSzvcCVrIO2Vv9ntDF/fe4DBmSnaHpvAO7i/Recq4/XqQ0e1nBe/G7kmtRgCS9OEZpkdgkw5tKzOwSU9qgM2slfqGqYVlhK5JcPT7DLLfS320pU+yyyCSiKYVxuIfUBglKK8=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>

<?xml version="1.0"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="pfx4e75cb99-37ff-4607-4871-6293b17e48b6" Version="2.0" IssueInstant="2014-07-17T01:01:48Z" Destination="http://sp.example.com/demo1/index.php?acs" InResponseTo="ONELOGIN_4fee3b046395c4e751011e97f8900b5273d56685">
  <saml:Issuer>http://idp.example.com/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  <ds:Reference URI="#pfx4e75cb99-37ff-4607-4871-6293b17e48b6"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>mpjRAuYzP7B78KWH8Or50wC6JgA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>wqD8aczrlkWnkScXj5uy6rMpSVdjDmKPnvOSBkBzC0R1eN2n5Uk1roGSbp8ZLEpPmUriczRakEysYVLrx2s5jp2AQ5gx60bYOzJess0ZM2aN5KUtWEDoII//7WdTfOIQvDhlGrSUWH96e9cIy54xyQlIbw8asC3TaaUzswRTnl8=</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  </samlp:Status>
  <saml:EncryptedAssertion>
    <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/><xenc:CipherData><xenc:CipherValue>FYl6TLmIllYe93ObVYtWbTOjyDimjVxKBa3+eNwRTbDzRXS4kax6vm69JK+HUEcu9SJAKUjJjObkRHWDQafwZT7+lddZ1gROUGY0Q/31VNlVuxVL1SAC7VMaRGsMsWIgeI5ZbD3d5ahrBjYbgCm8SI3dTDa0wcFqQZmUiF+fdaw=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></dsig:KeyInfo>
   <xenc:CipherData>
      <xenc:CipherValue>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</xenc:CipherValue>
   </xenc:CipherData>
</xenc:EncryptedData>
  </saml:EncryptedAssertion>
</samlp:Response>