saml2_auth_response.xml 3.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960
  1. <?xml version="1.0"?>
  2. <samlp:Response xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="pfx01a16805-19b6-c6b8-6206-715754b4da77" Version="2.0" IssueInstant="2017-10-04T00:21:43Z" Destination="http://testserver.com/auth/sso/" InResponseTo="mock_response">
  3. <saml:Issuer>https://example.com/saml/metadata/1234</saml:Issuer>
  4. <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  5. <ds:SignedInfo>
  6. <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
  7. <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
  8. <ds:Reference URI="#pfx01a16805-19b6-c6b8-6206-715754b4da77">
  9. <ds:Transforms>
  10. <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
  11. <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
  12. </ds:Transforms>
  13. <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
  14. <ds:DigestValue>none</ds:DigestValue>
  15. </ds:Reference>
  16. </ds:SignedInfo>
  17. <ds:SignatureValue>none</ds:SignatureValue>
  18. <ds:KeyInfo>
  19. <ds:X509Data>
  20. <ds:X509Certificate>none</ds:X509Certificate>
  21. </ds:X509Data>
  22. </ds:KeyInfo>
  23. </ds:Signature>
  24. <samlp:Status>
  25. <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  26. </samlp:Status>
  27. <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Version="2.0" ID="A1337f0b68ad3cc03d1a782f9a9b049ac663fbc54" IssueInstant="2017-10-04T00:21:43Z">
  28. <saml:Issuer>https://example.com/saml/metadata/1234</saml:Issuer>
  29. <saml:Subject>
  30. <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">rick@onehundredyears.com</saml:NameID>
  31. <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
  32. <saml:SubjectConfirmationData NotOnOrAfter="2099-01-01T00:00:00Z" Recipient="http://testserver.com/auth/sso/" InResponseTo="mock_response"/>
  33. </saml:SubjectConfirmation>
  34. </saml:Subject>
  35. <saml:Conditions NotBefore="2017-01-01T00:00:00Z" NotOnOrAfter="2099-01-01T00:00:00Z">
  36. <saml:AudienceRestriction>
  37. <saml:Audience>http://testserver.com/saml/metadata/saml2-org/</saml:Audience>
  38. </saml:AudienceRestriction>
  39. </saml:Conditions>
  40. <saml:AuthnStatement AuthnInstant="2017-01-01T00:00:00Z" SessionNotOnOrAfter="2099-01-01T00:00:00Z" SessionIndex="_cded8ad0-8a91-0135-96f1-0687370acf48">
  41. <saml:AuthnContext>
  42. <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
  43. </saml:AuthnContext>
  44. </saml:AuthnStatement>
  45. <saml:AttributeStatement>
  46. <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" Name="user_id">
  47. <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1234</saml:AttributeValue>
  48. </saml:Attribute>
  49. <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" Name="first_name">
  50. <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Rick</saml:AttributeValue>
  51. </saml:Attribute>
  52. <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" Name="email">
  53. <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">rick@onehundredyears.com</saml:AttributeValue>
  54. </saml:Attribute>
  55. <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" Name="last_name">
  56. <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Sanchez</saml:AttributeValue>
  57. </saml:Attribute>
  58. </saml:AttributeStatement>
  59. </saml:Assertion>
  60. </samlp:Response>