<?xml version='1.0' encoding='UTF-8'?>
<ns0:Response xmlns:ns0="urn:oasis:names:tc:SAML:2.0:protocol"
              xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion"
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
              Destination="http://lingon.catalogix.se:8087/"
              ID="id-ca5851401bf347a90701f665a2fb3fa9" InResponseTo="id12"
              IssueInstant="2014-03-08T13:05:06Z" Version="2.0">
    <ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">
        urn:mace:example.com:saml:roland:idp
    </ns1:Issuer>
    <ns0:Status>
        <ns0:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
    </ns0:Status>
    <ns1:EncryptedAssertion>
        <ns1:Assertion ID="id-7374c6eb0bd59c44beafe94743a45169"
                       IssueInstant="2014-03-08T13:05:06Z" Version="2.0">
            <ns1:Issuer
                    Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">
                urn:mace:example.com:saml:roland:idp
            </ns1:Issuer>
            <ns1:Subject>
                <ns1:NameID
                        Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
                        NameQualifier="" SPNameQualifier="id12">
                    c2645854117fc0a480e1b6ba2fafcb7799f7431ede0621e37a3b079dee753e57
                </ns1:NameID>
                <ns1:SubjectConfirmation
                        Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                    <ns1:SubjectConfirmationData InResponseTo="id12"
                                                 NotOnOrAfter="2014-03-08T13:10:06Z"
                                                 Recipient="http://lingon.catalogix.se:8087/"/>
                </ns1:SubjectConfirmation>
            </ns1:Subject>
            <ns1:Conditions NotBefore="2014-03-08T13:05:06Z"
                            NotOnOrAfter="2014-03-08T13:10:06Z">
                <ns1:AudienceRestriction>
                    <ns1:Audience>urn:mace:example.com:saml:roland:sp
                    </ns1:Audience>
                </ns1:AudienceRestriction>
            </ns1:Conditions>
            <ns1:AttributeStatement>
                <ns1:Attribute FriendlyName="surname" Name="urn:oid:2.5.4.4"
                               NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <ns1:AttributeValue xsi:type="xs:string">Jeter
                    </ns1:AttributeValue>
                </ns1:Attribute>
                <ns1:Attribute FriendlyName="title" Name="urn:oid:2.5.4.12"
                               NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <ns1:AttributeValue xsi:type="xs:string">shortstop
                    </ns1:AttributeValue>
                </ns1:Attribute>
                <ns1:Attribute FriendlyName="edupersonaffiliation"
                               Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1"
                               NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <ns1:AttributeValue xsi:type="xs:string">staff
                    </ns1:AttributeValue>
                    <ns1:AttributeValue xsi:type="xs:string">member
                    </ns1:AttributeValue>
                </ns1:Attribute>
                <ns1:Attribute FriendlyName="mail"
                               Name="urn:oid:0.9.2342.19200300.100.1.3"
                               NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <ns1:AttributeValue xsi:type="xs:string">foo@gmail.com
                    </ns1:AttributeValue>
                </ns1:Attribute>
                <ns1:Attribute FriendlyName="givenname" Name="urn:oid:2.5.4.42"
                               NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <ns1:AttributeValue xsi:type="xs:string">Derek
                    </ns1:AttributeValue>
                </ns1:Attribute>
            </ns1:AttributeStatement>
        </ns1:Assertion>
    </ns1:EncryptedAssertion>
</ns0:Response>
