Intermediate Token XML Document

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
   <soapenv:Body>
      <loginResponse xmlns="http://sts.idm.telekom.com/schema/">
         <tokenFormat>saml20</tokenFormat>
         <tokenEncoding>text/xml</tokenEncoding>
         <tokenData><![CDATA[<Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:idm="http://token.idm.telekom.com/saml/assertion/extension" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="STS-140ae730-13fe-4d24-a0eb-9fae4ce5ffb6" IssueInstant="2009-06-07T12:24:16.391+02:00" Version="2.0" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion http://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd"><Issuer>sts.idm.telekom.com</Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></ds:CanonicalizationMethod>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"></ds:SignatureMethod>
<ds:Reference URI="">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform>
<ds:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
<ds:DigestValue>KEgyugOwdTlJXy3NVQWD3vmYbHE=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>n1ORZ/FEakJrthS+Jx5Ub+W7ITg=</ds:SignatureValue>
</ds:Signature><Subject><EncryptedID><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></xenc:EncryptionMethod><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:RetrievalMethod URI="#STS-3b1a350f-00d4-4321-a1f3-5c6c464cfd50"></ds:RetrievalMethod></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>lnPGzLkKzn9n9JGvmrRRXr7Y45K2G50XCIr/etvn45gYIJJqirdJJWmE28+eK9D/HGuEwK2+6EsIJ3QUE/3Ej4Y4JQ1aldBLtnaVMLMbLSISPKDTet1JuoNjKxL3Fx3WsOMMd3I3dqaWyLohmPf0mQ3R/KR/sIEjUUGxo5Fqud4MTaNdEb7UjuE+HjXXvYlzqiZg/3gMtNmnVMxZ/txuxLtL/0q6C4FSege6lcRVS4hFxgUqSIvaO+MCnn4ZkDrmScUg2GokaFxYp+vky9u4ST9AbKnVcgYx1B9DC8l9auV1rW3D7zzYL00DvL7ResZPnxiR/Kg+0R6e3MSBM6X/AlXbvjrZTTthuPA4EPE+O6u+IT/bq5pBnCLzQHfaRFuYCNK6DDYC9Suo/Zg6XKBkpQ==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="STS-3b1a350f-00d4-4321-a1f3-5c6c464cfd50"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#kw-aes256"></xenc:EncryptionMethod><xenc:CipherData><xenc:CipherValue>hf1olYvJOHzVNKTDSigckkRT8qSlw4/TaqVJ4jihRSeKHaxKOCBiDQ==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></EncryptedID><SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></SubjectConfirmation></Subject><Conditions NotBefore="2009-06-07T12:24:16.391+02:00" NotOnOrAfter="2009-06-07T20:24:16.391+02:00"><AudienceRestriction><Audience>sts.idm.telekom.com</Audience></AudienceRestriction></Conditions><AuthnStatement AuthnInstant="2009-06-07T12:24:16.391+02:00"><AuthnContext><AuthnContextClassRef>urn:telekom:names:idm:THO:1.0:ac:classes:pwd</AuthnContextClassRef></AuthnContext></AuthnStatement></Assertion>]]></tokenData>
      </loginResponse>
   </soapenv:Body>
</soapenv:Envelope>