SAML Assertion Response |
This topic contains a sample response to a request for a SAML assertion. |
|
The following is the response received when a request to get a SAML artifact within a SAML assertion is sent to the identity provider:
<samlp:Response ResponseID="A9D550166-1DC3-4AF4-9C56-271E028C2DFE" MajorVersion=
"1" MinorVersion="1" IssueInstant="2009-04-01T11:23:11.679Z" InResponseTo=
"a997c83a8d-b5d7-b930-edba-02e37ab1765" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol">
<samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol">
<samlp:StatusCode Value="samlp:Success"/>
</samlp:Status>
<saml:Assertion AssertionID="A4B413744-287C-4A8F-8D0D-C9283F19A339" MajorVersion=
"1" MinorVersion="1" IssueInstant="2009-04-01T11:23:11.679Z" Issuer=
"https://www.cordys.com/SSO" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
<saml:Conditions NotBefore="2009-04-01T11:18:11.679Z" NotOnOrAfter=
2009-04-01T19:23:11.679Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"/>
<saml:AuthenticationStatement AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:password" AuthenticationInstant=
"2009-04-01T11:23:11.679Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
<saml:Subject xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
<saml:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jopl</saml:NameIdentifier>
</saml:Subject>
</saml:AuthenticationStatement>
</saml:Assertion>
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<Reference URI="#A4B413744-287C-4A8F-8D0D-C9283F19A339">
<Transforms>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<DigestValue>WbVQ557X2lU2TcrmQb1hn4yOPkI=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>R4fQ+wNie9Rey1+hAcDY3JVz3Dr7rUPOrd4JZuW7vhbTSJFSkaUw+
lPYB/l8dEJIMTm699GwAq+mJ3jIV+ybea7eQ9XQTAfhZppAQnr+6k8kdkQnILliYJLk0WIzOII1l9OI/vi+AL8PzolYowSQhvrusKl3izKcAk9d+vL+6QY=
</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>MIIB4DCCAUmgAwIBAgIQaJsGtYWAXgC78iR/9KXGDDKNBgkqhliG9w0BAQUFADArMQ8wDQYDVQ
QKEwZzeXN0ZW0xGDAWBgNVBAbUDk8vbml0b3JAQ05EMTMwMDAeFw0wOTAzMDkxMzEyNTBaFw0xOTAzMDcxMz
EyNTBaMDIxHzAdBgNVBAMTFnNpbmdsZSBzaWduLW9uIHNlcnZpY2UxDzANBgNVBAoTBnN5c3RlbTCBnzANBgkqhkiG9
w0BAQEFAAOBjQAwgYkCgYEAur1NRnLrS9RepnKA1ZMyfzcfv4B5b2NxWDbTxbpWVbJq/p+Tp9r+akWWiRc20cZQH9es
SJ9n3K8KLge/VLUPYSWKJt7P+gqLRaze4a/W51cYAC5QP+U/KP/UJ2csDw11MI0magDVQZ1fZTjO2s+j9LCcpqO0LBzXQ
TEhmrnZbxECAwEAATANBgkqhkiG9w0BAQUFAAOBgQCm3a4Eg94g9xqIswNhHu6b+yJpmHO8WDgHdGyZ2kQ0VezBa
0ECit57aZszco7qG2ZIwnV5WxBYFD+PmcqjcXFhzkviHileZoTpWFcfEpySvokwlrGz9BDyrn6FyGC3YfZ8N0eeXyJW5Ak
NAD59CSnEbliLPNON2TQpeOaeL0roUg==</X509Certificate>
</X509Data>
</KeyInfo>
</Signature>
<samlp:AssertionArtifact xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol">
MDF3eiA3HTMvRoDydILiGLihWu7akA65UvZOe0p5hka4siLYQInR/N1C</samlp:AssertionArtifact>
</samlp:Response>