Files
Gainsight/OtherNotes/SAML_Response_Example.xml

152 lines
6.1 KiB
XML

<ns0:Response xmlns:ns0="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:ns2="http://www.w3.org/2000/09/xmldsig#"
xmlns:ns3="http://www.w3.org/2001/XMLSchema-instance"
Destination="https://DOMAIN.northpass.com/auth/saml/callback"
ID="id-xcCqs7S1wsvvT0ZlO"
InResponseTo="_ef46f2a7-1a0c-4225-a3ed-ff0879c5e06f"
IssueInstant="2020-08-18T14:48:55Z"
Version="2.0"
>
<ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">
https://URL
</ns1:Issuer>
<ns2:Signature Id="Signature1">
<ns2:SignedInfo>
<ns2:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ns2:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ns2:Reference URI="#id-xcCqs7S1wsvvT0ZlO">
<ns2:Transforms>
<ns2:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ns2:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ns2:Transforms>
<ns2:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ns2:DigestValue>1wAqYZJPi/DLgFWukB/bK0zbtmk=</ns2:DigestValue>
</ns2:Reference>
</ns2:SignedInfo>
<ns2:SignatureValue>
abcdefghijklmnopqrstuvwxyz
</ns2:SignatureValue>
<ns2:KeyInfo>
<ns2:X509Data>
<ns2:X509Certificate>
abcdefghijklmnopqrstuvwxyz
</ns2:X509Certificate>
</ns2:X509Data>
</ns2:KeyInfo>
</ns2:Signature>
<ns0:Status>
<ns0:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
</ns0:Status>
<ns1:Assertion ID="id-QYKB8uQqZwX7gcacf"
IssueInstant="2020-08-18T14:48:55Z"
Version="2.0"
>
<ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">
https://URL
</ns1:Issuer>
<ns2:Signature Id="Signature2">
<ns2:SignedInfo>
<ns2:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ns2:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ns2:Reference URI="#id-QYKB8uQqZwX7gcacf">
<ns2:Transforms>
<ns2:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ns2:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ns2:Transforms>
<ns2:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ns2:DigestValue>gj7FEYKXYoNJ0TmFobgaV/n/qHA=</ns2:DigestValue>
</ns2:Reference>
</ns2:SignedInfo>
<ns2:SignatureValue>
abcdefghijklmnopqrstuvwxyz
</ns2:SignatureValue>
<ns2:KeyInfo>
<ns2:X509Data>
<ns2:X509Certificate>
abcdefghijklmnopqrstuvwxyz
</ns2:X509Certificate>
</ns2:X509Data>
</ns2:KeyInfo>
</ns2:Signature>
<ns1:Subject>
<ns1:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
NameQualifier="https://URL"
SPNameQualifier="https://app.schoolkeep.com"
>samltest@sample.com
</ns1:NameID>
<ns1:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<ns1:SubjectConfirmationData InResponseTo="_ef46f2a7-1a0c-4225-a3ed-ff0879c5e06f"
NotOnOrAfter="2020-08-18T15:48:55Z"
Recipient="https://DOMAIN.northpass.com/auth/saml/callback"
/>
</ns1:SubjectConfirmation>
</ns1:Subject>
<ns1:Conditions NotBefore="2020-08-18T14:48:55Z"
NotOnOrAfter="2020-08-18T15:48:55Z"
>
<ns1:AudienceRestriction>
<ns1:Audience>https://app.schoolkeep.com</ns1:Audience>
</ns1:AudienceRestriction>
</ns1:Conditions>
<ns1:AttributeStatement>
<ns1:Attribute Name="first_name"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>James
</ns1:AttributeValue>
</ns1:Attribute>
<ns1:Attribute Name="last_name"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>Smith
</ns1:AttributeValue>
</ns1:Attribute>
<ns1:Attribute Name="Email address"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>samltest@sample.com
</ns1:AttributeValue>
</ns1:Attribute>
<ns1:Attribute Name="Family name"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>Smith
</ns1:AttributeValue>
</ns1:Attribute>
<ns1:Attribute Name="email"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>samltest@sample.com
</ns1:AttributeValue>
</ns1:Attribute>
<ns1:Attribute Name="Given name"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>James
</ns1:AttributeValue>
</ns1:Attribute>
<ns1:Attribute Name="Full name"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<ns1:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
ns3:type="xs:string"
>James Smith
</ns1:AttributeValue>
</ns1:Attribute>
</ns1:AttributeStatement>
</ns1:Assertion>
</ns0:Response>