pp108 : SAML Assertion Response

SAML Assertion Response

This topic contains a sample response to a request for a SAML assertion.

The following is the response received when a request to get a SAML artifact within a SAML assertion is sent to the identity provider:

<samlp:Response ResponseID="A9D550166-1DC3-4AF4-9C56-271E028C2DFE" MajorVersion=
"1" MinorVersion="1" IssueInstant="2009-04-01T11:23:11.679Z" InResponseTo=
"a997c83a8d-b5d7-b930-edba-02e37ab1765" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol">
 <samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol">
  <samlp:StatusCode Value="samlp:Success"/>
 </samlp:Status>
 <saml:Assertion AssertionID="A4B413744-287C-4A8F-8D0D-C9283F19A339" MajorVersion=
"1" MinorVersion="1" IssueInstant="2009-04-01T11:23:11.679Z" Issuer=
"https://www.cordys.com/SSO" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
  <saml:Conditions NotBefore="2009-04-01T11:18:11.679Z" NotOnOrAfter=
2009-04-01T19:23:11.679Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"/>
  <saml:AuthenticationStatement AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:password" AuthenticationInstant=
"2009-04-01T11:23:11.679Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
   <saml:Subject xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
    <saml:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jopl</saml:NameIdentifier>
   </saml:Subject>
  </saml:AuthenticationStatement>
 </saml:Assertion>
 <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
  <SignedInfo>
   <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
   <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
   <Reference URI="#A4B413744-287C-4A8F-8D0D-C9283F19A339">
    <Transforms>
     <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    </Transforms>
    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <DigestValue>WbVQ557X2lU2TcrmQb1hn4yOPkI=</DigestValue>
   </Reference>
  </SignedInfo>
  <SignatureValue>R4fQ+wNie9Rey1+hAcDY3JVz3Dr7rUPOrd4JZuW7vhbTSJFSkaUw+
lPYB/l8dEJIMTm699GwAq+mJ3jIV+ybea7eQ9XQTAfhZppAQnr+6k8kdkQnILliYJLk0WIzOII1l9OI/vi+AL8PzolYowSQhvrusKl3izKcAk9d+vL+6QY=
</SignatureValue>
  <KeyInfo>
   <X509Data>
    <X509Certificate>MIIB4DCCAUmgAwIBAgIQaJsGtYWAXgC78iR/9KXGDDKNBgkqhliG9w0BAQUFADArMQ8wDQYDVQ
QKEwZzeXN0ZW0xGDAWBgNVBAbUDk8vbml0b3JAQ05EMTMwMDAeFw0wOTAzMDkxMzEyNTBaFw0xOTAzMDcxMz
EyNTBaMDIxHzAdBgNVBAMTFnNpbmdsZSBzaWduLW9uIHNlcnZpY2UxDzANBgNVBAoTBnN5c3RlbTCBnzANBgkqhkiG9
w0BAQEFAAOBjQAwgYkCgYEAur1NRnLrS9RepnKA1ZMyfzcfv4B5b2NxWDbTxbpWVbJq/p+Tp9r+akWWiRc20cZQH9es
SJ9n3K8KLge/VLUPYSWKJt7P+gqLRaze4a/W51cYAC5QP+U/KP/UJ2csDw11MI0magDVQZ1fZTjO2s+j9LCcpqO0LBzXQ
TEhmrnZbxECAwEAATANBgkqhkiG9w0BAQUFAAOBgQCm3a4Eg94g9xqIswNhHu6b+yJpmHO8WDgHdGyZ2kQ0VezBa
0ECit57aZszco7qG2ZIwnV5WxBYFD+PmcqjcXFhzkviHileZoTpWFcfEpySvokwlrGz9BDyrn6FyGC3YfZ8N0eeXyJW5Ak
NAD59CSnEbliLPNON2TQpeOaeL0roUg==</X509Certificate>
   </X509Data>
  </KeyInfo>
 </Signature>
 <samlp:AssertionArtifact xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol">
MDF3eiA3HTMvRoDydILiGLihWu7akA65UvZOe0p5hka4siLYQInR/N1C</samlp:AssertionArtifact>
</samlp:Response>