samlresponse.xml

<samlp:Response ID="_cabc2708-7639-4500-ad89-bfb0e8714f0a"
                Version="2.0"
                IssueInstant="2018-05-16T09:42:53.744Z"
                Destination="https://.../examples/saml"
                Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified"
                InResponseTo="..."
                xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                >
    <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://cern.ch/login</Issuer>
    <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
    </samlp:Status>
    <Assertion ID="_78ad0262-6862-4bf5-aa8f-c5cc6a618c03"
               IssueInstant="2018-05-16T09:42:53.728Z"
               Version="2.0"
               xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
               >
        <Issuer>https://cern.ch/login</Issuer>
        <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
            <SignedInfo>
                <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
                <Reference URI="#_78ad0262-6862-4bf5-aa8f-c5cc6a618c03">
                    <Transforms>
                        <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                        <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                    </Transforms>
                    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                    <DigestValue>...</DigestValue>
                </Reference>
            </SignedInfo>
            <SignatureValue>...</SignatureValue>
            <KeyInfo>
                <ds:X509Data xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                    <ds:X509Certificate>...</ds:X509Certificate>
                </ds:X509Data>
            </KeyInfo>
        </Signature>
        <Subject>
            <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">luis.rodriguez.fernandez@cern.ch</NameID>
            <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <SubjectConfirmationData InResponseTo="..."
                                         NotOnOrAfter="2018-05-16T09:47:53.744Z"
                                         Recipient="https://.../examples/saml"
                                         />
            </SubjectConfirmation>
        </Subject>
        <Conditions NotBefore="2018-05-16T09:42:53.619Z"
                    NotOnOrAfter="2018-05-16T10:42:53.619Z"
                    >
            <AudienceRestriction>
                <Audience>https://.../examples/</Audience>
            </AudienceRestriction>
        </Conditions>
        <AttributeStatement>
            <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn">
                <AttributeValue>luis.rodriguez.fernandez@cern.ch</AttributeValue>
            </Attribute>
          
            More attributes here...

            <Attribute Name="http://schemas.xmlsoap.org/claims/Federation">
                <AttributeValue>CERN</AttributeValue>
            </Attribute>
        </AttributeStatement>
        <AuthnStatement AuthnInstant="2018-05-16T09:34:33.050Z"
                        SessionIndex="..."
                        >
            <AuthnContext>
                <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</AuthnContextClassRef>
            </AuthnContext>
        </AuthnStatement>
    </Assertion>
</samlp:Response>